HP Pro 6305 HP ProtectTools Security Software,Version 6.0 User Guide
HP Pro 6305 Manual
View all HP Pro 6305 manuals
Add to My Manuals
Save this manual to your list of manuals |
HP Pro 6305 manual content summary:
- HP Pro 6305 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 1
HP ProtectTools Security Software, Version 6.0 User Guide - HP Pro 6305 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 2
HP products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. HP Hewlett-Packard Company. HP ProtectTools Security Software User Guide Third Edition: November 2010 Document - HP Pro 6305 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 3
About This Book This guide provides basic information for upgrading this computer model. WARNING! Text set off in this manner indicates that failure to follow directions could result in bodily - HP Pro 6305 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 4
iv About This Book ENWW - HP Pro 6305 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 5
HP ProtectTools 3 Embedded Security for HP ProtectTools 4 Drive Encryption for HP ProtectTools 4 File Sanitizer for HP ProtectTools 5 Device Access Manager for HP ProtectTools 5 Privacy Manager for HP ProtectTools 5 Computrace for HP ProtectTools (formerly known as LoJack Pro 6 Accessing HP - HP Pro 6305 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 6
and Restore ...22 Backing up your data ...22 Restoring your data ...23 Changing your Windows user name and picture 24 4 Password Manager for HP ProtectTools ...25 Adding logons ...26 Editing logons ...26 Using the Logons menu ...27 Organizing logons into categories ...27 Managing your logons ...28 - HP Pro 6305 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 7
Encrypting or decrypting individual drives 31 Backup and recovery (administrator task 31 Creating backup keys 31 6 Privacy Manager for HP ProtectTools ...32 Opening Privacy Manager ...32 Setup procedures ...32 Managing Privacy Manager Certificates 32 Requesting and installing a Privacy Manager - HP Pro 6305 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 8
shredding one asset 47 Manually shredding all selected items 47 Manually activating free space bleaching 47 Aborting a shred or free space bleaching operation 48 Viewing the log files ...48 8 Embedded Security for HP ProtectTools ...49 Setup procedures ...49 Installing Embedded Security for HP - HP Pro 6305 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 9
Creating an extendable JITA for a user or group 55 Disabling a JITA for a user or group 56 Advanced Settings ...56 10 Computrace for HP ProtectTools ...57 Glossary ...58 Index ...62 ENWW ix - HP Pro 6305 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 10
x ENWW - HP Pro 6305 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 11
. HP Professional Desktop systems do not currently support fingerprint devices. HP ProtectTools software modules may be preinstalled, preloaded, or available as a configurable option or as an after market option. Visit http://www.hp.com for more information. NOTE: The instructions in this guide are - HP Pro 6305 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 12
user access. ● Administrator tools are used to add and remove HP ProtectTools users and view user status. ● Configure and change File Manager to increase security of e-mails and documents. ● Activate Computrace for HP ProtectTools ● Configure Preferences and Backup and Restore options. ● Organize, - HP Pro 6305 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 13
PC. ● Allows creation of a personal secure drive (PSD), which is useful in protecting user file and folder information. ● Supports be backed up in a secure location. Credential Manager (Password Manager) for HP ProtectTools Credential Manager (part of Security Manager) is a repository for user - HP Pro 6305 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 14
HP ProtectTools provides the ability to create a Personal Secure Drive. This capability allows the user to create a virtual drive partition on the PC the two physical computers can decrypt the data. Drive Encryption for HP ProtectTools Drive Encryption is most often used to restrict access to the - HP Pro 6305 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 15
File Sanitizer for HP ProtectTools is used to permanently delete data, including Internet browser activity, temporary files, previously deleted data, or any other information. File Sanitizer can be configured to run either manually or automatically on a user-defined schedule. Example 1: An - HP Pro 6305 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 16
ensure no one can fake Pro) Computrace for HP ProtectTools is a service that can track the location of a stolen computer whenever the user accesses the Internet. Example 1: A school principal instructed the IT department to keep track of all the computers at his school. After the inventory of the PCs - HP Pro 6305 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 17
the files or save them to a writeable device such as a CD. The following feature helps restrict access to data: Device Access Manager for HP ProtectTools allows IT managers to restrict access to writeable devices so sensitive information cannot be printed or copied from the hard drive onto removable - HP Pro 6305 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 18
access to an unsecured business PC presents a very tangible risk to critical data such as information from financial services, an executive, or the hard drive. See the following chapter: ◦ Device Access Manager for HP ProtectTools on page 53 ● The Personal Secure Drive feature encrypts sensitive data - HP Pro 6305 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 19
elements Assigning security roles In managing computer security, one important practice is to divide responsibilities and rights or for individual use, these roles may all be held by the same person. For HP ProtectTools, the security duties and privileges can be divided into the following roles: ● - HP Pro 6305 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 20
Setup password Power-on password Windows Logon password Set in this HP ProtectTools module Smart Card Security BIOS, by IT administrator Function Can on, restarted, or restored from hibernation. Can be used for manual logon. Creating a secure password When creating passwords, you must first - HP Pro 6305 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 21
You can back up credentials in the following ways: ● Use Drive Encryption for HP ProtectTools to select and back up HP ProtectTools credentials. You can also register for Online Drive Encryption Key Recovery Service to store a backup copy of your encryption key, which will enable you to access - HP Pro 6305 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 22
for administering HP ProtectTools Security Manager. To open the console: ● Select Start > All Programs > HP > HP ProtectTools Administrative security options to selectively disallow various types of devices that could compromise PC security and set access permissions for various users and groups. ● - HP Pro 6305 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 23
the computer. The first time that you log on to Windows, you will be prompted to set up HP ProtectTools Security Manager. Click OK to launch the Security Manager Setup wizard, which will guide you through the basic steps in configuring the program. NOTE: You can also launch the Security Wizard by - HP Pro 6305 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 24
credentials required to authenticate each class of user when accessing the computer and HP ProtectTools applications during a user session. Logon tab To specify the credentials required must specify at least one credential. 14 Chapter 2 HP ProtectTools Security Manager Administrative Console ENWW - HP Pro 6305 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 25
3. Click the Apply button to save the changes. NOTE: The Allow One Step logon setting allows users of this computer to skip Windows logon if the users list: 1. Click Start, click All Programs, click HP, and then click HP ProtectTools Administrative Console. 2. In the Administrative Console left pane, - HP Pro 6305 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 26
completely remove the user, you must remove the user from both Security Manager and Windows. 1. Click Start, click All Programs, click HP, and then click HP ProtectTools Administrative Console. 2. In the Administrative Console left pane, click User. 3. Click the user name for the account you want to - HP Pro 6305 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 27
the computer or sent to a data recovery service. To enable or disable Drive Encryption, click on the Setup Wizard in the Administrative Console. For more information on using Drive Encryption for HP ProtectTools, refer to Drive Encryption for HP ProtectTools on page 29. Managing Device Access Device - HP Pro 6305 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 28
of the configured security login methods is permissible, users may log in using any one of the security login methods when the HP Drive Encryption login screen opens. This action logs the user in to Windows. ● If the HP Password Manager level of security has been configured and all of the security - HP Pro 6305 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 29
device built in or connected to the computer. Each supported credential will have an entry in the Credentials group. Changing part of Security Manager. Smart Card setup and configuration is used with the HP Smart Card keyboard. The Smart Card is a personal security device that protects - HP Pro 6305 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 30
Initializing the Smart Card HP ProtectTools Security Manager can support a number of different Smart Cards. The number 5. Type in your PIN number, click the Apply button, then follow the onscreen instructions. 6. After the Smart Card has been successfully initialized, proceed to register the Smart - HP Pro 6305 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 31
can view their device access setting in Security Manager. To view device access settings: 1. Click Start, click All Programs, click HP, and then click HP ProtectTools Security Manager. 2. In the Security Manager left pane, expand Device Access Manager. 3. To view which devices are denied access - HP Pro 6305 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 32
up your data daily. Backups can also be used to migrate from one computer to another, also sometimes called importing and exporting. Remember though computer after reinstalling the operating system, the system must have HP ProtectTools Security Manager already installed before restoring the data from - HP Pro 6305 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 33
was previously created through Security Manager's Backup and Restore feature. To restore your data: 1. Click Start, click All Programs, click HP, and then click HP ProtectTools Security Manager. 2. In the Security Manager left pane, click Advanced, and then click Backup and Restore. 3. Click Restore - HP Pro 6305 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 34
box. 3. To change your picture, click the Choose Picture button and browse to select a picture. 4. Click the Save button to save your changes. 24 Chapter 3 HP ProtectTools Security Manager ENWW - HP Pro 6305 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 35
Manager will launch the website or program, navigate to the logon screen and log you in automatically. To verify your identity you will use your HP ProtectTools credentials, such as your Windows password or smart card, depending on your computer configuration. This means that you will use the same - HP Pro 6305 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 36
Open the logon screen for a website or program. 2. Click the arrow on the Password Manager icon, and then select one of the following, depending on whether the logon screen is for a website or a program. ● For a website click the green arrow. 26 Chapter 4 Password Manager for HP ProtectTools ENWW - HP Pro 6305 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 37
> Windows password > green arrow > Settings. Organizing logons into categories Use categories to keep your logons in order. It's a simple matter of creating one or more categories and drag-and-dropping your logons into the desired categories. To add a category: 1. In the Security Manager left pane - HP Pro 6305 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 38
multiple logon accounts - painless and intuitive, from one central location. Your logons are listed on the Manage want to edit. ● Add a logon - Click Add Logon and follow the on-screen instructions. ● Edit a logon - Select a logon and click Edit. Then change the logon data for HP ProtectTools ENWW - HP Pro 6305 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 39
removed from the computer or sent to a data recovery service. Drive Encryption for HP ProtectTools software is the industry's first full volume encryption drives ● Gives you easy password access and pre-boot authentication ● Supports Microsoft Windows XP, Windows Vista, and Windows 7 ● Makes use - HP Pro 6305 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 40
: If the Windows administrator has enabled Pre-boot Security in the HP ProtectTools Administrative Console, you will log in to the computer immediately the computer. Activating a TPM-protected password Use Embedded Security for HP ProtectTools to activate the TPM. After activation, logging in at - HP Pro 6305 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 41
encryption key is saved on the storage device you selected. 5. Click OK when the confirmation dialog box opens. NOTE: Refer to the Drive Encryption for HP ProtectTools Help file for information on managing and performing a recovery. ENWW Advanced tasks 31 - HP Pro 6305 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 42
of communication when using Microsoft mail, Microsoft Office documents, and Instant Messenger. Privacy Manager leverages the security infrastructure provided by HP ProtectTools Security Manager, which includes the following security logon methods: ● Windows password ● Smart card You may use any of - HP Pro 6305 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 43
. 6. Authenticate using your chosen security logon method. 7. If you choose to begin the Trusted Contact invitation process, follow the on-screen instructions. - or - If you click Cancel, refer to Managing Trusted Contacts for information on adding a Trusted Contact at a later time. Viewing Privacy - HP Pro 6305 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 44
. 3. Click Renew certificate. 4. Follow the on-screen instructions to purchase a new Privacy Manager Certificate. NOTE: The more than one Privacy Manager Certificate on your computer that was installed from within Privacy Manager, you can specify one as the 6 Privacy Manager for HP ProtectTools ENWW - HP Pro 6305 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 45
your chosen security logon method. 6. Follow the on-screen instructions. Managing Trusted Contacts Trusted Contacts are users with whom you have exchanged Privacy Manager Certificates, enabling you to securely communicate with one another. Adding Trusted Contacts 1. You send an e-mail invitation - HP Pro 6305 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 46
dialog box opens, read the text, and then click OK. An e-mail is automatically generated. 4. Enter one or more e-mail addresses of the recipients you want to add as Trusted Contacts. 5. Edit the text and using your chosen security logon method. 36 Chapter 6 Privacy Manager for HP ProtectTools ENWW - HP Pro 6305 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 47
NOTE: When the e-mail is received by the Trusted Contact recipient, the recipient must open the e-mail and click Accept in the lower-right corner of the e-mail, and then click OK when the confirmation dialog box opens. 7. When you receive an e-mail response from a recipient accepting the invitation - HP Pro 6305 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 48
Office document 1. Right-click the HP ProtectTools icon in the notification area Microsoft Word or Microsoft Excel document You can add more than one signature line to your document by appointing suggested signers. A suggested instructions to sign by a specific date. 38 Chapter 6 Privacy Manager for - HP Pro 6305 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 49
Provider. The Signature Setup dialog box opens. 4. In the box under Suggested signer, enter the name of the suggested signer. 5. In the box under Instructions to the signer, enter a message for this suggested signer. NOTE: This message will appear in place of a title, and is either deleted or - HP Pro 6305 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 50
Attach the Microsoft Office document. 4. Refer to Sealing and sending an e-mail message for further instructions. Viewing a signed Microsoft Office document NOTE: You do not need to have a Privacy Manager Certificate Microsoft Office document. 40 Chapter 6 Privacy Manager for HP ProtectTools ENWW - HP Pro 6305 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 51
Using Privacy Manager in Microsoft Outlook When Privacy Manager is installed, a Privacy button is displayed on the Microsoft Outlook toolbar, and a Send Securely button is displayed on the toolbar of each Microsoft Outlook e-mail message. NOTE: If you are using Microsoft Office 2007, you must have - HP Pro 6305 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 52
name or click Browse to search for a location, and then click Next. 5. On the "Migration File Import" page, click Finish. 42 Chapter 6 Privacy Manager for HP ProtectTools ENWW - HP Pro 6305 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 53
bleaching provides no additional security to shredded assets. You can set an automatic free space bleaching schedule or you can manually activate free space bleaching using the HP ProtectTools icon in the notification area, at the far right of the taskbar. Setup procedures Opening File Sanitizer To - HP Pro 6305 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 54
Free space bleaching is for those assets that you delete using the Windows Recycle Bin or for manually deleted assets. Free space bleaching provides no additional security to shredded assets. To set a free assets that are selected for shredding. 44 Chapter 7 File Sanitizer for HP ProtectTools ENWW - HP Pro 6305 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 55
To select a predefined shred profile: 1. In the Security Manager left pane, expand File Sanitizer and click Settings. 2. Click a predefined shred profile. 3. Click View Details to view the list of assets that are selected for shredding. 4. Under Shred the following, select the check box next to each - HP Pro 6305 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 56
. 2. If a confirmation dialog box opens, click Yes. Using the File Sanitizer icon CAUTION: Shredded assets cannot be recovered. Carefully consider which items you select for manual shredding. 1. Navigate to the document or folder you want to shred. 2. Drag the asset to the File Sanitizer icon on the - HP Pro 6305 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 57
- or - 1. Right-click the File Sanitizer icon on the desktop, and then click Shred One. 2. When the Browse dialog box opens, navigate to the asset desktop, and then click Shred Now. 2. When the confirmation dialog box opens, click Yes. Manually activating free space bleaching 1. Right-click the HP - HP Pro 6305 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 58
space bleaching operation is in progress, a message above the HP ProtectTools Security Manager icon in the notification area is displayed. The that are successfully shredded or bleached do not appear in the log files. One log file is created for shred operations and another log file is created for - HP Pro 6305 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 59
installed in your computer to use Embedded Security for HP ProtectTools. Most HP commercial desktop computers include the Infineon TPM, which is the functions, such as backing up and restoring the key hierarchy ● Support for third-party applications (such as Microsoft Outlook and Internet Explorer) - HP Pro 6305 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 60
area, at the far right of the taskbar, and then select Embedded Security Initialization. The HP ProtectTools Embedded Security Initialization Wizard opens. 2. Follow the on-screen instructions. Setting up the basic user account Setting up a basic user account in Embedded Security accomplishes - HP Pro 6305 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 61
certificate is not available, you must obtain one from a certification authority. For instructions on configuring your e-mail and obtaining a agent to decrypt your information. NOTE: Encrypting files and folders is not supported on Windows Home versions. To encrypt files and folders: 1. Right-click - HP Pro 6305 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 62
pane, click Embedded Security, and then click Backup. 3. In the right pane, click Configure. The HP Embedded Security for HP ProtectTools Backup Wizard opens. 4. Follow the on-screen instructions. Restoring certification data from the backup file To restore data from the backup file: 1. Click Start - HP Pro 6305 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 63
Users and Groups to manage access. Windows Home versions do not support Local Users and Groups, therefore Device Access Manager will not help file for instructions. Starting background service For device profiles to be applied, the HP ProtectTools Device Locking/Auditing background service must be - HP Pro 6305 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 64
NOTE: If background service is not running, it attempts to start now. Click Yes to allow of devices. Adding a user or a group 1. Click Start, click All Programs, click HP, and then click HP ProtectTools Administrative Console. 2. In the left pane, expand Device Access Manager, and then click Device - HP Pro 6305 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 65
user or group Administrators can allow users or group access to devices using just-in-time authentication. 1. In the left pane of HP ProtectTools Administrative Console, click Device Access Manager, and then click JITA Configuration. 2. From the devices drop-down menu, select either removable media - HP Pro 6305 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 66
login, authenticate to Security Manager and access the device. One minute before the JITA period is about to expire, the . 1. In the left pane of HP ProtectTools Administrative Console, click Device Access Manager background services need to be running. The easiest way to start these services is to - HP Pro 6305 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 67
have previously run the Computrace Activation Wizard and your Customer Center user account already exists, you can purchase additional licenses by contacting your HP account representative. To log in to Customer Center: 1. Go to https://cc.absolute.com/. 2. In the Login ID and Password fields, type - HP Pro 6305 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 68
features are accessible. Drive Encryption is activated using the HP ProtectTools Security Manager Administrative Console setup wizard. Only an BIOS level. bleaching. see free space bleaching. certification authority. Service that issues the certificates required to run a public key infrastructure. - HP Pro 6305 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 69
local backup key. You must create an account with the service to set up online access to your backup key. Drive reencryption of basic user keys from one platform owner key to another. Encryption an automatic shred-for example, Ctrl+Alt+S. manual shred. Immediate shredding of an asset or selected - HP Pro 6305 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 70
A task that allows the user to decrypt one or more chat history sessions, displaying the Contact Screen Name(s) in plain text and making the session available for viewing. revocation password. A password that is - HP Pro 6305 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 71
trusted messages are sent from a trusted sender to a Trusted Contact. Trusted Platform Module (TPM) embedded security chip. The generic term for the HP ProtectTools Embedded Security Chip. A TPM authenticates a computer, rather than a user, by storing information specific to the host system, such as - HP Pro 6305 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 72
29 Device Access Manager for HP ProtectTools background service 53 common use examples 5 HP ProtectTools aborting a shred or free space bleaching operation 48 bleaching 43 common use examples 5 manually activating free space bleaching 47 manually shredding all selected items 47 manually shredding one - HP Pro 6305 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 73
logons 28 password strength 28 using logons menu 27 personal secure drive (PSD) 51 power-on password definition 10 Privacy Manager for HP ProtectTools adding a signature line when signing a Microsoft Word or Microsoft Excel document 38 adding a suggested signer's signature line 39 adding a trusted - HP Pro 6305 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 74
viewing Privacy Manager certificate details 33 viewing trusted contact details 37 R restricting access to sensitive data 7 device access 53 S security key objectives 6 levels 13 logging in 18 login methods 13 roles 9 setup wizard 13 security setup password 10 shred profile customizing 45 predefined
HP ProtectTools Security Software,
Version 6.0
User Guide