HP ProBook 4340s HP ProtectTools Getting Started
HP ProBook 4340s Manual
 |
View all HP ProBook 4340s manuals
Add to My Manuals
Save this manual to your list of manuals |
HP ProBook 4340s manual content summary:
- HP ProBook 4340s | HP ProtectTools Getting Started - Page 1
HP ProtectTools Getting Started - HP ProBook 4340s | HP ProtectTools Getting Started - Page 2
countries and is used under license. Microsoft, Windows, and Windows Vista are U.S. registered trademarks of Microsoft Corporation. The information contained herein is subject to change without notice. The only warranties for HP products and services are set forth in the express warranty statements - HP ProBook 4340s | HP ProtectTools Getting Started - Page 3
...13 3 Easy Setup Guide for Small Business ...15 Getting started ...16 Password Manager ...17 Viewing and managing the saved authentications in Password Manager 17 File Sanitizer for HP ProtectTools ...18 Device Access Manager for HP ProtectTools 19 Drive Encryption for HP ProtectTools 20 iii - HP ProBook 4340s | HP ProtectTools Getting Started - Page 4
24 Managing users ...24 Credentials ...25 SpareKey ...25 Fingerprints ...25 Face ...26 Smart card ...26 Initializing the smart card 26 Registering the smart card 27 Configuring the smart card 28 Contactless card 28 Proximity card 28 Bluetooth ...28 PIN ...29 Applications ...29 General tab ...29 - HP ProBook 4340s | HP ProtectTools Getting Started - Page 5
Changing your Windows password 43 Setting up your SpareKey 43 Enrolling your fingerprints 44 Enrolling PIN 47 Contactless card 47 Proximity card 47 Bluetooth ...48 PIN ...48 Antimalware Central ...48 your data 50 6 Drive Encryption for HP ProtectTools (select models only 53 Opening Drive - HP ProBook 4340s | HP ProtectTools Getting Started - Page 6
Enhanced Security with TPM (select models only 60 Encrypting or decrypting individual drive partitions (software encryption only) ...61 Performing an HP SpareKey Recovery 61 Backup and recovery (administrator task 61 Backing up encryption keys 61 Recovering access to an activated computer using - HP ProBook 4340s | HP ProtectTools Getting Started - Page 7
shredding one asset 87 Manually shredding all selected items 87 Manually activating free space bleaching 88 Aborting a shred or free space bleaching operation 88 Viewing the log files ...88 9 Device Access Manager for HP ProtectTools (select models only 89 Opening Device Access Manager ...89 - HP ProBook 4340s | HP ProtectTools Getting Started - Page 8
data from the backup file 107 Changing the owner password 107 Resetting a user password 107 Migrating keys with the Migration Wizard 107 12 Localized password exceptions ...109 Windows IMEs not supported at the Preboot Security level or the HP Drive Encryption level ......... 109 viii - HP ProBook 4340s | HP ProtectTools Getting Started - Page 9
Password changes using keyboard layout that is also supported 110 Special key handling ...111 What to do when a password is rejected 113 13 Related documentation ...115 Glossary ...117 Index ...123 ix - HP ProBook 4340s | HP ProtectTools Getting Started - Page 10
x - HP ProBook 4340s | HP ProtectTools Getting Started - Page 11
your computer may vary depending on your model. HP ProtectTools software modules may be preinstalled, preloaded, or available for download from the HP website. For more information, go to http://www.hp.com. NOTE: The instructions in this guide are written with the assumption that you have already - HP ProBook 4340s | HP ProtectTools Getting Started - Page 12
. ● Activate Computrace for HP ProtectTools. ● Configure Preferences and Backup and Restore options. Credential Manager General users can perform the following functions: ● Change user names and passwords. ● Configure and change user credentials such as a Windows password, fingerprint, face images - HP ProBook 4340s | HP ProtectTools Getting Started - Page 13
which is useful in protecting user file and folder information. ● Supports third-party applications (such as Microsoft Outlook and Internet Explorer) for disable access to communication devices for specific individuals or groups of users. Computrace for HP ProtectTools (purchased separately) ● - HP ProBook 4340s | HP ProtectTools Getting Started - Page 14
ProtectTools security product description and common use examples Most of the HP ProtectTools security products have both user authentication (usually a password) and an administrative backup to gain access if passwords are lost, not available, or forgotten, or any time corporate security requires - HP ProBook 4340s | HP ProtectTools Getting Started - Page 15
before Windows login. Once set up, the hard drive cannot be accessed without a password HP ProtectTools is used to permanently delete data, including Internet browser activity, temporary files, previously deleted data, or any other information. File Sanitizer can be configured to run either manually - HP ProBook 4340s | HP ProtectTools Getting Started - Page 16
are blocked, mouse and keyboards will continue to function. his emails only go to specific clients and that no one HP ProtectTools (purchased separately) is a service that can track the location of a stolen computer whenever the user accesses the Internet. Example 1: A school principal instructed - HP ProBook 4340s | HP ProtectTools Getting Started - Page 17
unauthorized access from internal or external locations ● Creating strong password policies Protecting against targeted theft An example of targeted The Personal Secure Drive feature, provided by the Embedded Security for HP ProtectTools module, encrypts sensitive data to help ensure that it cannot - HP ProBook 4340s | HP ProtectTools Getting Started - Page 18
computer access to review sensitive financial business computer presents a very real risk to corporate network resources such as information from financial services passwords or access to password-protected applications. See HP ProtectTools Security Manager on page 33. ● Device Access Manager for HP - HP ProBook 4340s | HP ProtectTools Getting Started - Page 19
by regular users or administrators. HP ProtectTools password Windows Logon password Security Manager Backup and Recovery password Smart card PIN Set in the following module Function Windows® Control Panel or Can be used for manual logon and for HP ProtectTools Security authentication to access - HP ProBook 4340s | HP ProtectTools Getting Started - Page 20
HP ProtectTools password Basic User Key password Emergency Recovery Key password Owner password Set in the following module owner functions of Embedded Security. Creating a secure password When creating passwords, you must first follow any specifications that are set by the program. In general - HP ProBook 4340s | HP ProtectTools Getting Started - Page 21
and settings You can back up credentials in the following ways: ● Use Drive Encryption for HP ProtectTools to select and back up HP ProtectTools credentials. ● Use the Backup and Recovery tool in HP ProtectTools Security Manager as a central location from which you can back up and restore security - HP ProBook 4340s | HP ProtectTools Getting Started - Page 22
12 Chapter 1 Introduction to security - HP ProBook 4340s | HP ProtectTools Getting Started - Page 23
Setup Wizard guides you through enabling HP ProtectTools desktop gadget icon is not available in Windows XP. - or - Click Start, click All Programs, click Security and Protection, and then click HP ProtectTools Administrative Console. In the left pane, click Setup Wizard. 2. Read the Welcome screen - HP ProBook 4340s | HP ProtectTools Getting Started - Page 24
of the following options: ● Windows password ● Fingerprints (select models only) ● Face screen instructions, and then click Next. 10. If you are prompted to connect a Bluetooth phone, follow the on-screen instructions, and then click Next. 11. If prompted for a PIN, follow the on-screen instructions - HP ProBook 4340s | HP ProtectTools Getting Started - Page 25
within HP ProtectTools for Small Business. There are numerous tools and options available in this software that will allow you to fine-tune your preferences and set your access control. This Easy Setup Guide will automatically provide information to help you with the currently displayed window. 15 - HP ProBook 4340s | HP ProtectTools Getting Started - Page 26
> Security and Protection > HP ProtectTools Security Manager. 2. Enter your Windows password, or create a Windows password. 3. Complete the setup wizard. NOTE: By default, HP ProtectTools Security Manager is set 4. Click the Apply button when complete. 16 Chapter 3 Easy Setup Guide for Small Business - HP ProBook 4340s | HP ProtectTools Getting Started - Page 27
launch your authentications from a central location. Password Manager also supports the launching of saved sites from Windows. To open Password Manager, use one of the following two methods: ● Use the keyboard combination of ctrl+Windows logo key+h to open Password Manager, and then click Open to - HP ProBook 4340s | HP ProtectTools Getting Started - Page 28
HP ProtectTools File Sanitizer is designed to make it very difficult for an unauthorized person to recover data you have deleted. Multiple options allow you to erase manually the Available shred options window that you want to permanently selected in the Delete Settings window you just configured. 6. - HP ProBook 4340s | HP ProtectTools Getting Started - Page 29
secured on the hard drive and not walk out the door of your business. An example would be to allow a user access to your data but block them from copying it to a CD, personal music player, or USB memory device. Below is an easy way to set this up. 1. Click Start > All - HP ProBook 4340s | HP ProtectTools Getting Started - Page 30
the following simple steps to activate Drive Encryption for HP ProtectTools: 1. Click Start > All Programs > Security and Protection > HP ProtectTools Administrative Console > Setup Wizard. 2. Select Next in the Welcome screen. 3. Enter your Windows password to start the activation wizard, and then - HP ProBook 4340s | HP ProtectTools Getting Started - Page 31
to the computer, networks, and critical data. Administration of HP ProtectTools Security Manager is provided through the Administrative Console feature. ● Managing users of the computer ● Adjusting device-specific parameters ● Configuring installed Security Manager applications ● Adding additional - HP ProBook 4340s | HP ProtectTools Getting Started - Page 32
version number and copyright notice. ● Main area-Displays application-specific screens. ?-Displays the Administrative Console Help. This icon is located at the top right of the window frame, next to the minimize and maximize icons. 22 Chapter 4 HP ProtectTools Security Manager Administrative Console - HP ProBook 4340s | HP ProtectTools Getting Started - Page 33
is accessed from the menu panel on the left side of HP ProtectTools Administrative Console. You can use the applications in this specify the credentials required to authenticate each class of user when logging on to Windows or logging on to websites and programs during a user session. To set up - HP ProBook 4340s | HP ProtectTools Getting Started - Page 34
users can log on, click Check that HP ProtectTools can log on. 8. To return to the original settings, click Restore Defaults. 9. Click Apply. Settings To allow users of this computer to skip Windows logon if authentication was already performed at the BIOS level or at the Drive Encryption level - HP ProBook 4340s | HP ProtectTools Getting Started - Page 35
specific user, select the user, and then view the policies in the lower window. HP ProtectTools Security Manager and configure settings. SpareKey You can configure whether or not to allow SpareKey authentication for Windows sensitivity to variations in fingerprint swipes and therefore decreases the - HP ProBook 4340s | HP ProtectTools Getting Started - Page 36
the smart card before it can be used for authentication. Most CSP and PKCS11 standard smart cards are supported in Windows. Initializing the smart card HP ProtectTools Security Manager can support a number of different smart cards. The number and type of characters used as PIN numbers may vary. The - HP ProBook 4340s | HP ProtectTools Getting Started - Page 37
ActivIdentity > ActivClient > PIN initialization tool). b. Follow the on-screen instructions to set up a PIN. c. Note the unlock code for HP ProtectTools Administrative Console: 1. Under Central Management, click Setup Wizard. 2. In the Welcome! screen, click Next. 3. Enter your Windows password - HP ProBook 4340s | HP ProtectTools Getting Started - Page 38
types of contactless cards are supported by HP ProtectTools: ● Contactless HID iCLASS memory cards ● Contactless MiFare Classic 1k, 4k, and mini memory cards ▲ To set up your contactless card, place it very close to the reader, follow the on-screen instructions, and then click Apply. Proximity - HP ProBook 4340s | HP ProtectTools Getting Started - Page 39
security. Specify the Bluetooth settings: ▲ To behavior of currently installed HP ProtectTools Security Manager applications 1. Select the check box next to a specific setting to enable it, or clear the check to disable all applications. ● Password Manager-Enables Password Manager for all users of - HP ProBook 4340s | HP ProtectTools Getting Started - Page 40
how to centrally manage HP ProtectTools Security Manager with DigitalPersona Pro. 1. Select the check box next to a specific setting to enable it, page. ● Embedded Security (select models only)-Configure backup, migration, password reset, and advanced settings. For more information, see the Embedded - HP ProBook 4340s | HP ProtectTools Getting Started - Page 41
, it has been disabled by the administrator of this computer. ● Business Solutions tab 1. Click Administration, click Central Management, and then click Business Solutions. Information about central management of HP ProtectTools with DigitalPersona Pro is displayed. 2. If your computer is connected - HP ProBook 4340s | HP ProtectTools Getting Started - Page 42
32 Chapter 4 HP ProtectTools Security Manager Administrative Console - HP ProBook 4340s | HP ProtectTools Getting Started - Page 43
download from the Web: ● Manage your logon and passwords. ● Easily change your Windows® operating system password. ● Set program preferences. ● Use fingerprints Security and Protection, and then click HP ProtectTools Security Manager. ● Double-click the HP ProtectTools icon in the notification area, - HP ProBook 4340s | HP ProtectTools Getting Started - Page 44
. ◦ About-Displays information about HP ProtectTools Security Manager, such as the version number and copyright notice. ● Main area-Displays application-specific screens. ● ?-Displays the Security Manager software Help. This icon is located at the top right of the window, next to the minimize and - HP ProBook 4340s | HP ProtectTools Getting Started - Page 45
card in the upper-left corner of the dashboard. 3. Click the box displaying your Windows user name for this account, type the new name, and then click Save. To applications in two locations: ● HP ProtectTools desktop gadget The banner color at the top of the HP ProtectTools gadget icon changes to - HP ProBook 4340s | HP ProtectTools Getting Started - Page 46
installed security applications and the specific status of each application. You Windows password, your fingerprint, your face, smart card, proximity card, contactless card, Bluetooth phone, or PIN. ● Credential Manager-Provides a means to easily change your Windows password, enroll your fingerprints - HP ProBook 4340s | HP ProtectTools Getting Started - Page 47
has not yet been created The following options are displayed on the context menu: ● Add [somedomain.com] to the Password Manager-Allows you to add a logon for the current logon screen. ● Open Password Manager-Launches Password Manager. ● Icon settings-Allows you to specify conditions in which the - HP ProBook 4340s | HP ProtectTools Getting Started - Page 48
appears only for sites where VeriSign Identity Protection (VIP) is available. When supported by the site, you can also choose to have your VIP Security Code that you wish to use (fingerprints, face, smart card, proximity card, contactless card, Bluetooth phone, PIN, or password), and then log on with - HP ProBook 4340s | HP ProtectTools Getting Started - Page 49
the hotkey combination, on the Security Manager dashboard, click Password Manager, and then click Settings. 2. Swipe your fingerprint (on computers with a built-in or connected fingerprint reader), or enter your Windows password. Organizing logons into categories Create one or more categories to - HP ProBook 4340s | HP ProtectTools Getting Started - Page 50
on page 39. To add an additional logon for a website or program: 1. Open the logon screen for the website or program. 2. Click the Password Manager icon to display its context menu. 3. Click Add Logon, and then follow the on-screen instructions. 40 Chapter 5 HP ProtectTools Security Manager - HP ProBook 4340s | HP ProtectTools Getting Started - Page 51
. ◦ Click Add Logon. The Add Logon dialog box opens with the website logon screen or program listed in the Current screen field. ◦ Click Continue. The Add Logon to Password Manager screen is displayed. ◦ Follow the on-screen instructions. For more information, see Adding logons on page 37. ◦ The - HP ProBook 4340s | HP ProtectTools Getting Started - Page 52
logon screens. 2. Open Password Manager with ctrl+win+h-The default hotkey that opens the Password Manager Quick Links menu is ctrl+Windows appending the Credential ID, you can drag and drop or manually enter the Credential ID information. To enable VeriSign VIP and 5 HP ProtectTools Security Manager - HP ProBook 4340s | HP ProtectTools Getting Started - Page 53
Card ● Bluetooth ● PIN To enroll or change a credential, click the link and follow the on-screen instructions. Changing your Windows password Security Manager makes changing your Windows password simpler and quicker than doing it through Windows Control Panel. To change your Windows password, follow - HP ProBook 4340s | HP ProtectTools Getting Started - Page 54
from a pre-boot logon screen or the Windows Welcome screen. Enrolling your fingerprints If the administrator selected Fingerprints on the Choose your credentials screen and if your computer has a fingerprint reader built in or connected, the Getting Started wizard guides you through the process of - HP ProBook 4340s | HP ProtectTools Getting Started - Page 55
Click Yes or No. 5. Click the Camera icon, and then follow the on-screen instructions to enroll your scene. NOTE: Be sure to look at your image, turning your you are not able to log on using Face Recognition, you can enter your Windows password to log on to the computer. 3. Once you log on to the - HP ProBook 4340s | HP ProtectTools Getting Started - Page 56
logon screen background color manually, click the Light bulb icon. Learning If face logon is unsuccessful but you enter your password an authentication credential and performed the steps described in the HP ProtectTools Administrative Console software Help, the Getting Started Wizard prompts - HP ProBook 4340s | HP ProtectTools Getting Started - Page 57
of contactless cards are supported by HP ProtectTools: ● Contactless HID iCLASS memory cards ● Contactless MiFare Classic 1k, 4k, and mini memory cards ▲ To set up your contactless card, place it very close to the reader, and then follow the on-screen instructions. Proximity card A proximity card - HP ProBook 4340s | HP ProtectTools Getting Started - Page 58
reader, and then follow the on-screen instructions. Bluetooth If the administrator has enabled Bluetooth as an authentication credential, you can set up a Bluetooth phone in conjunction with other credentials for additional security. NOTE: Only Bluetooth phone devices are supported. 1. Be sure that - HP ProBook 4340s | HP ProtectTools Getting Started - Page 59
disabled by the administrator of this computer. ● Business Solutions tab 1. Open the Security Manager dashboard. HP ProtectTools Security Manager. From the Security Manager dashboard, click Advanced, and then click Preferences. Available settings are displayed on two tabs: General and Fingerprint - HP ProBook 4340s | HP ProtectTools Getting Started - Page 60
fingerprint has been swiped, playing different sounds for specific program events. You may assign new sounds to these events through the Sounds tab in the Sound setting in Windows exporting. NOTE: Only Password Manager, Privacy Manager, Face fingerprint authentication information is not backed up. HP - HP ProBook 4340s | HP ProtectTools Getting Started - Page 61
7. Enter a password to protect the file. 8. Click Finish. To restore your data: 1. Open the previously created storage file. Enter the path in the field provided, or click Browse. 5. Enter the password used to protect the file. 6. Select the modules for which you want to restore data. In most cases - HP ProBook 4340s | HP ProtectTools Getting Started - Page 62
52 Chapter 5 HP ProtectTools Security Manager - HP ProBook 4340s | HP ProtectTools Getting Started - Page 63
Drive Encryption is activated, you must log in at the Drive Encryption login screen, which is displayed before the Windows® operating system starts. The HP ProtectTools Security Manager Setup Wizard allows Windows administrators to activate Drive Encryption, back up the encryption key, and select or - HP ProBook 4340s | HP ProtectTools Getting Started - Page 64
HP ProtectTools Security Manager Setup Wizard to activate Drive Encryption. 2. Follow the on-screen instructions the FAT32 or FAT16 format. A USB memory stick, Secure Digital (SD) Memory Card, or MultiMedia Card (MMC) pre-boot screen is displayed, requiring authentication before Windows will start - HP ProBook 4340s | HP ProtectTools Getting Started - Page 65
Trusted Computing Group's OPAL specification for self-encrypting drive HP ProtectTools Security Manager Setup Wizard to activate Drive Encryption. 2. Follow the on-screen instructions the FAT32 or FAT16 format. A USB memory stick, Secure Digital (SD) Memory Card, or MultiMedia Card (MMC) may - HP ProBook 4340s | HP ProtectTools Getting Started - Page 66
the FAT32 or FAT16 format. A USB memory stick, Secure Digital (SD) Memory Card, or MultiMedia Card (MMC) may displayed, requiring authentication before Windows will start. Drive Encryption has HP ProtectTools Security Manager software Help for more information. ▲ Follow the on-screen instructions - HP ProBook 4340s | HP ProtectTools Getting Started - Page 67
or hardware encryption. NOTE: If the Windows administrator has enabled BIOS Pre-boot Security in HP ProtectTools Security Manager and if One-Step BIOS Pre-boot, without needing to reauthenticate at the Drive Encryption login screen. Single user logon: ▲ On the Logon page, enter your Windows password - HP ProBook 4340s | HP ProtectTools Getting Started - Page 68
is used to log in at the Drive Encryption login screen, additional credentials are required at Windows logon to access user accounts. Protect your data by encrypting All Programs, click Security and Protection, and then click HP ProtectTools Security Manager. 2. Under Security Applications, click - HP ProBook 4340s | HP ProtectTools Getting Started - Page 69
Encryption Settings page. ● If the status is Disabled, Drive Encryption has not yet been activated by the Windows administrator and is not protecting the hard drive. Use the HP ProtectTools Security Manager Setup Wizard to activate Drive Encryption. ● If the status is Enabled, Drive Encryption has - HP ProBook 4340s | HP ProtectTools Getting Started - Page 70
steps: NOTE: The TPM option must be enabled in BIOS Setup. ▲ Use Embedded Security for HP ProtectTools. For more information, see the Embedded Security software Help starts. c. Follow the on-screen instructions to turn on the TPM security hardware, create a TPM password, and take ownership of the - HP ProBook 4340s | HP ProtectTools Getting Started - Page 71
and Protection, and then click HP ProtectTools Administrative Console. 2. In the NOTE: Dynamic partitions are not supported. If a partition is displayed screen, additional credentials are required at Windows logon to access user accounts. It is highly recommended that you reset your password - HP ProBook 4340s | HP ProtectTools Getting Started - Page 72
. Your computer starts. NOTE: If the recovery key is used to log on at the Drive Encryption login screen, additional credentials are required at Windows logon to access user accounts. It is highly recommended that you reset your password after performing a recovery. 62 Chapter 6 Drive Encryption for - HP ProBook 4340s | HP ProtectTools Getting Started - Page 73
Insert the removable storage device that contains your backup key. 3. When the Drive Encryption for HP ProtectTools login dialog box opens, click Options. 4. Click Recovery. 5. Select the file NOTE: It is highly recommended that you reset your password after performing a recovery. Advanced tasks 63 - HP ProBook 4340s | HP ProtectTools Getting Started - Page 74
64 Chapter 6 Drive Encryption for HP ProtectTools (select models only) - HP ProBook 4340s | HP ProtectTools Getting Started - Page 75
the following security login methods: ● Fingerprint authentication ● Windows® password ● Smart card ● Face recognition You may use any of the above security login methods in Privacy Manager. Opening Privacy Manager To open Privacy Manager: ● To access Outlook-specific features in Microsoft Outlook - HP ProBook 4340s | HP ProtectTools Getting Started - Page 76
Certificate Request Accepted page, click Finish. You will receive an email in Microsoft Outlook with your Privacy Manager Certificate attached. 66 Chapter 7 Privacy Manager for HP ProtectTools (select models only) - HP ProBook 4340s | HP ProtectTools Getting Started - Page 77
password, and then click Next. 6. Authenticate using your chosen security login method. 7. If you choose to begin the Trusted Contact invitation process, follow the on-screen instructions Allow use of third-party certificates setting in HP ProtectTools Administrative Console must have been enabled on - HP ProBook 4340s | HP ProtectTools Getting Started - Page 78
of the PFX file, and then click Next. Type the PFX file password, and then click Next. 4. When the import process is complete, screen instructions to obtain a new Privacy Manager Certificate. NOTE: The Privacy Manager Certificate renewal process does not replace HP ProtectTools (select models only) - HP ProBook 4340s | HP ProtectTools Getting Started - Page 79
the Migration File page, click Browse to search for the .dppsm file that you created during the backup process, and then click Next. 4. Enter the password you used when you created the backup, and then click Next. 5. Click Finish. See Setting up a Privacy Manager Certificate on page 67 or Backing up - HP ProBook 4340s | HP ProtectTools Getting Started - Page 80
chosen security login method. 6. Follow the on-screen instructions. Managing Trusted Contacts Trusted Contacts are users with the DigitalPersona website at http://digitalpersona.com/privacymanager/download. Adding a Trusted Contact 1. Open Privacy Manager for HP ProtectTools (select models only) - HP ProBook 4340s | HP ProtectTools Getting Started - Page 81
3. When the Trusted Contact Invitation dialog box opens, read the text, and then click OK. An email is automatically generated. 4. Enter the email addresses of the recipients you want to add as Trusted Contacts. 5. Edit the text and sign your name (optional). 6. Click Send. NOTE: If you have not - HP ProBook 4340s | HP ProtectTools Getting Started - Page 82
. 2. Click a Trusted Contact. 3. Click the Advanced button. The Advanced Trusted Contact Management dialog box opens. 4. Click Check Revocation. 5. Click Close. 72 Chapter 7 Privacy Manager for HP ProtectTools (select models only) - HP ProBook 4340s | HP ProtectTools Getting Started - Page 83
General tasks You can use Privacy Manager with the following Microsoft products: ● Microsoft Outlook ● Microsoft Office Using Privacy Manager in Microsoft Outlook When Privacy Manager is installed, a Privacy button is displayed on the Microsoft Outlook toolbar, and a Send Securely button is - HP ProBook 4340s | HP ProtectTools Getting Started - Page 84
66, Managing Trusted Contacts on page 70, or Configuring Privacy Manager for Microsoft Office on page 75 for more information. 74 Chapter 7 Privacy Manager for HP ProtectTools (select models only) - HP ProBook 4340s | HP ProtectTools Getting Started - Page 85
edit the document, follow these steps: 1. Click the Office button in the upper-left corner of the screen. 2. Click Prepare, and then click Mark as Final. 3. When the confirmation dialog box opens, click the final page of the document, with instructions to sign by a specific date. General tasks 75 - HP ProBook 4340s | HP ProtectTools Getting Started - Page 86
enter the name of the suggested signer. 5. In the box under Instructions to the signer, enter a message for this suggested signer. NOTE will appear in place of a title, and is either deleted or replaced by the user's title when the document is signed. 6. Select the HP ProtectTools (select models only) - HP ProBook 4340s | HP ProtectTools Getting Started - Page 87
4. See Sealing and sending an email message on page 74 for further instructions. Viewing a signed Microsoft Office document NOTE: You do not need to icon is displayed in the status bar at the bottom of the document window. 1. Click the Digital Signatures icon to toggle display of the Signatures - HP ProBook 4340s | HP ProtectTools Getting Started - Page 88
search for a location, and then click Next. 5. Enter and confirm a password, and then click Next. NOTE: Store this password in a safe place, because you will need it when you restore the migration click Migration. 2. Click Restore. 78 Chapter 7 Privacy Manager for HP ProtectTools (select models only) - HP ProBook 4340s | HP ProtectTools Getting Started - Page 89
3. On the Migration File page, click Browse to search for the file, and then click Next. 4. Enter the password you used when you created the backup file, and then click Next. 5. On the Migration File page, click Finish. Central administration of Privacy Manager Your - HP ProBook 4340s | HP ProtectTools Getting Started - Page 90
80 Chapter 7 Privacy Manager for HP ProtectTools (select models only) - HP ProBook 4340s | HP ProtectTools Getting Started - Page 91
meaningless data, making it virtually impossible to retrieve the original asset. A Windows simple delete action may leave the file (or asset) intact on You can set an automatic shred schedule, or you can manually activate shredding using the HP ProtectTools icon in the notification area, at the far - HP ProBook 4340s | HP ProtectTools Getting Started - Page 92
can manually activate free space bleaching using the HP ProtectTools manually at any time. For more information, see Manually shredding one asset on page 87. NOTE: A scheduled task starts at a specific more shred options: ● Windows shutdown-Shreds all selected assets when Windows shuts down. NOTE: - HP ProBook 4340s | HP ProtectTools Getting Started - Page 93
Windows Recycle Bin, or by deleting the assets manually. Free space bleaching provides no additional security to shredded assets. NOTE: A scheduled task starts at a specific drive, select the Activate Scheduler check box, enter your Windows password, and then select a day and time. 3. Click Apply - HP ProBook 4340s | HP ProtectTools Getting Started - Page 94
, click Add, and then browse or type the path to the file or folder. b. Click Open, and then click OK. 84 Chapter 8 File Sanitizer for HP ProtectTools (select models only) - HP ProBook 4340s | HP ProtectTools Getting Started - Page 95
: If you select Simple Delete Settings, free space bleaching can be performed occasionally on the assets that have been deleted manually or by using the Windows Recycle Bin. 1. Open File Sanitizer, click Settings, click Simple Delete Settings, and then click View Details. 2. Select the assets you - HP ProBook 4340s | HP ProtectTools Getting Started - Page 96
feature in Windows. For details, see Using the File Sanitizer icon on page 87. ● Manually shred a specific asset or all selected assets-These features allows you to manually shred items confirmation dialog box opens, click Yes. 86 Chapter 8 File Sanitizer for HP ProtectTools (select models only) - HP ProBook 4340s | HP ProtectTools Getting Started - Page 97
, navigate to the asset you want to shred, and then click OK. 4. When the confirmation dialog box opens, click Yes. Manually shredding all selected items 1. Right-click the HP ProtectTools icon in the notification area, at the far right of the taskbar, click File Sanitizer, and then click Shred Now - HP ProBook 4340s | HP ProtectTools Getting Started - Page 98
File Sanitizer, and then click Shred. 2. Click the Shred now button. 3. When the confirmation dialog box opens, click Yes. Manually activating free space bleaching 1. Right-click the HP ProtectTools icon in the notification area, at the far right of the taskbar, click File Sanitizer, and then click - HP ProBook 4340s | HP ProtectTools Getting Started - Page 99
human interface/input devices, such as a mouse, keyboard, TouchPad, and fingerprint reader, are not controlled by Device Access Manager. For more information, see Unmanaged Device Classes on page 99. Windows® operating system administrators use HP ProtectTools Device Access Manager to control access - HP ProBook 4340s | HP ProtectTools Getting Started - Page 100
All Bluetooth® devices NOTE: If Bluetooth devices are used as authentication credentials, Bluetooth HP ProtectTools Administrative Console, click Device Access Manager, and then click Simple Configuration. 2. In the right pane, to deny access, select the check box for a device class or a specific - HP ProBook 4340s | HP ProtectTools Getting Started - Page 101
enforce device locking: ● Device Locking/Auditing service ● DAMDrv.sys driver Starting the service starts the device driver, but stopping the service does not stop the driver. To determine whether the background service is running, open a command prompt window, and then type sc query flcdlock. To - HP ProBook 4340s | HP ProtectTools Getting Started - Page 102
inherited. For example, read access may be inherited from a higher class, but write access may be specifically denied for a user or group. NOTE: If the Read check box is cleared, the access control or class of devices: 92 Chapter 9 Device Access Manager for HP ProtectTools (select models only) - HP ProBook 4340s | HP ProtectTools Getting Started - Page 103
for a user or a group To grant permission for a user or a group to access a device or a class of devices: 1. In the left pane of HP ProtectTools Administrative Console, click Device Access Manager, and then click Device Class Configuration. 2. In the device list, click one of the following: ● Device - HP ProBook 4340s | HP ProtectTools Getting Started - Page 104
device for one user of a group Administrators can allow access to a specific device while denying access to all other members of that user's group for all devices in the class: 1. In the left pane of HP ProtectTools Administrative Console, click Device Access Manager, and then click Device Class - HP ProBook 4340s | HP ProtectTools Getting Started - Page 105
group To remove permission for a user or a group to access a device or a class of devices, follow these steps: 1. In the left pane of HP ProtectTools Administrative Console, click Device Access Manager, and then click Device Class Configuration. 2. In the device list, click the device class that you - HP ProBook 4340s | HP ProtectTools Getting Started - Page 106
or group access to devices using just-in-time authentication that the user can extend before it expires. 1. In the left pane of HP ProtectTools Administrative Console, click Device Access Manager, and then click JITA Configuration. 2. From the device's drop-down menu, select either removable media - HP ProBook 4340s | HP ProtectTools Getting Started - Page 107
a user or group Administrators can disable user or group access to devices using just-in-time authentication. 1. In the left pane of HP ProtectTools Administrative Console, click Device Access Manager, and then click JITA Configuration. 2. From the device's drop-down menu, select either removable - HP ProBook 4340s | HP ProtectTools Getting Started - Page 108
removable media. - or - Open a command prompt window with Administrator privileges, and then type: sc start flcdlock Press enter. 2. When the services are started, the drive list can be edited. Enter name of the trusted user. 98 Chapter 9 Device Access Manager for HP ProtectTools (select models only) - HP ProBook 4340s | HP ProtectTools Getting Started - Page 109
Class Configuration view. Unmanaged Device Classes HP ProtectTools Device Access Manager does not manage the following device classes: ● Input/output devices ◦ Biometric ◦ Mouse ◦ Keyboard ◦ Printer ◦ Plug and play (PnP) printers ◦ Printer upgrade ◦ Infrared human interface devices ◦ Smart card - HP ProBook 4340s | HP ProtectTools Getting Started - Page 110
management (APM) support ● Miscellaneous ◦ Computer ◦ Decoder ◦ Display ◦ Processor ◦ System ◦ Unknown ◦ Volume ◦ Volume snapshot ◦ Security devices ◦ Security accelerator ◦ Intel® unified display driver ◦ Media driver ◦ Medium changer ◦ Multifunction ◦ Legacard ◦ Net client ◦ Net service ◦ Net - HP ProBook 4340s | HP ProtectTools Getting Started - Page 111
to function even if the hard drive is erased or replaced. To activate Computrace for HP ProtectTools: 1. Connect to the Internet. 2. Click Start, contacting your HP account representative. To log in to the Customer Center: 1. Go to https://cc.absolute.com/. 2. In the Login ID and Password fields, - HP ProBook 4340s | HP ProtectTools Getting Started - Page 112
102 Chapter 10 Theft recovery (select models only) - HP ProBook 4340s | HP ProtectTools Getting Started - Page 113
Embedded Security for HP ProtectTools. Embedded Security for HP ProtectTools protects against unauthorized backing up and restoring the key hierarchy ● Support for third-party applications (such as Microsoft factor when the user logs on to Windows. Setup procedures CAUTION: To reduce security risk - HP ProBook 4340s | HP ProtectTools Getting Started - Page 114
far right of the taskbar, select Embedded Security, and then select Manage Embedded Security Initialization. The HP ProtectTools Embedded Security Initialization Wizard opens. 2. Follow the on-screen instructions. Setting up the basic user account Setting up a basic user account in Embedded Security - HP ProBook 4340s | HP ProtectTools Getting Started - Page 115
and then click HP ProtectTools Security Manager. 2. In the left pane, click Embedded Security, and then click User Settings. 3. In the right pane, under Embedded Security Features, click Configure. The Embedded Security User Initialization Wizard opens. 4. Follow the on-screen instructions. NOTE: To - HP ProBook 4340s | HP ProtectTools Getting Started - Page 116
Basic User password, click Change. 4. Type the old password, and then set and confirm the new password. 5. Click HP ProtectTools Administrative Console. 2. In the left pane, click Embedded Security, and then click Backup. 3. Follow the on-screen instructions. 106 Chapter 11 Embedded Security for HP - HP ProBook 4340s | HP ProtectTools Getting Started - Page 117
click Backup. 3. In the right pane, click Restore all. The HP Embedded Security for ProtectTools Backup Wizard opens. 4. Follow the on-screen instructions. Changing the owner password Administrators can change the owner password: 1. Click Start, click All Programs, click Security and Protection, and - HP ProBook 4340s | HP ProtectTools Getting Started - Page 118
108 Chapter 11 Embedded Security for HP ProtectTools (select models only) - HP ProBook 4340s | HP ProtectTools Getting Started - Page 119
or Chinese characters, by using a standard western keyboard. IMEs are not supported at the Preboot Security or HP Drive Encryption level. A Windows password cannot be entered with an IME at the Preboot Security or HP Drive Encryption login screen, and doing so may result in a lockout situation - HP ProBook 4340s | HP ProtectTools Getting Started - Page 120
problem by using the HP ProtectTools Manage Users feature to remove the user from HP ProtectTools, selecting the desired keyboard layout in the operating system, and then running the Security Manager Setup Wizard again for the same user. The BIOS stores the desired keyboard layout, and passwords - HP ProBook 4340s | HP ProtectTools Getting Started - Page 121
BIOS Preboot Security and HP Drive Encryption. Numeric passwords must be entered using the numeric keypad. ● Korean When a user selects a supported Korean keyboard layout and then enters a password, the same password in HP Windows. BIOS Preboot Security. Drive Encryption. 40a is not supported. It - HP ProBook 4340s | HP ProtectTools Getting Started - Page 122
supported. However, empirical testing has demonstrated that this IME is a near duplicate of keyboard layout 411 when typing simple characters. The software therefore switches this IME to keyboard layout 411 when securing the BIOS and HP Drive Encryption with localized Japanese passwords - HP ProBook 4340s | HP ProtectTools Getting Started - Page 123
, and then follow the on-screen instructions. 3. On the Settings tab, click the Add button to add a supported keyboard (add U.S. keyboards under Chinese Input Language). 4. Set the supported keyboard for default input. 5. Restart HP ProtectTools, and then enter the password again. ● A user is using - HP ProBook 4340s | HP ProtectTools Getting Started - Page 124
114 Chapter 12 Localized password exceptions - HP ProBook 4340s | HP ProtectTools Getting Started - Page 125
13 Related documentation For more information about Security Manager for HP ProtectTools: ● To access this guide, select Start, click Help and Support, and then click User Guides. ● On the Web, go to http://www.hp.com/services/protecttools (English only). 115 - HP ProBook 4340s | HP ProtectTools Getting Started - Page 126
116 Chapter 13 Related documentation - HP ProBook 4340s | HP ProtectTools Getting Started - Page 127
access and manage the features and settings in HP ProtectTools. administrator See Windows administrator. asset A data component consisting of use a physical feature, such as a fingerprint, to identify a user. certification authority (CA) A service that issues the certificates required to run - HP ProBook 4340s | HP ProtectTools Getting Started - Page 128
by specific individuals. dashboard A central location where general users can access and manage the features and settings in Security Manager for HP ProtectTools. logon screen A logon screen that is displayed before Windows starts up. Users must enter their Windows user name and their password or - HP ProBook 4340s | HP ProtectTools Getting Started - Page 129
or a specific device. HP SpareKey Recovery The ability to access your computer by answering security questions correctly. ID card A Windows desktop gadget name and password (and possibly other selected information) that can be used to log on to websites or other programs. manual shred Immediate - HP ProBook 4340s | HP ProtectTools Getting Started - Page 130
the signer's title can also be included. simple delete Deletion of the Windows reference to an asset. The asset content remains on the hard drive until you to use Security Manager to access Internet and Windows applications that require password authentication. smart card A small piece of hardware, - HP ProBook 4340s | HP ProtectTools Getting Started - Page 131
) embedded security chip The generic term for the HP ProtectTools Embedded Security Chip. A TPM authenticates a computer, rather than a user, by storing information specific to the host system, such as encryption keys, digital certificates, and passwords. A TPM minimizes the risk that information on - HP ProBook 4340s | HP ProtectTools Getting Started - Page 132
122 Glossary - HP ProBook 4340s | HP ProtectTools Getting Started - Page 133
authentication 23, 45 B background service 91 backing up data 50 encryption key 61 HP ProtectTools credentials 11 Privacy Manager Certificates User Key password changing 106 setting 104 bleaching aborting 88 activating 88 cancelling 88 manual 88 schedule 83 Bluetooth 28, 48 Business Solutions 31, - HP ProBook 4340s | HP ProtectTools Getting Started - Page 134
Guide for Small Business 15 encryption status, displaying 58 enrolling fingerprints 44 scenes 44 eSATA 99 HP ProtectTools Administrative Console 21 opening 22 HP ProtectTools features 2 HP ProtectTools Getting Started Guide 115 HP ProtectTools Security Manager 33 Backup and Recovery password 9 HP - HP ProBook 4340s | HP ProtectTools Getting Started - Page 135
ProtectTools 89 Drive Encryption 54 File Sanitizer for HP ProtectTools 82 HP ProtectTools Administrative Console 22 Privacy Manager 65 Security Manager 33 owner password changing 107 setting 104 P password Basic User Key 106 changes using different keyboard layouts 110 changing 43 changing owner 107 - HP ProBook 4340s | HP ProtectTools Getting Started - Page 136
82 shredding aborting 88 automatic 86 cancelling 88 key sequence 86 manual 87 signing email message 73 Microsoft Office document 75 Simple Configuration email message 74 signed Microsoft Office document 77 W Windows Logon password 9 wizard, HP ProtectTools Setup 13 Word, adding signature line 75 - HP ProBook 4340s | HP ProtectTools Getting Started - Page 137
- HP ProBook 4340s | HP ProtectTools Getting Started - Page 138
-
1 -
2 -
3 -
4 -
5 -
6 -
7 -
8
-
9
-
10
-
11
-
12
-
13
-
14
-
15
-
16
-
17
-
18
-
19
-
20
-
21
-
22
-
23
-
24
-
25
-
26
-
27
-
28
-
29
-
30
-
31
-
32
-
33
-
34
-
35
-
36
-
37
-
38
-
39
-
40
-
41
-
42
-
43
-
44
-
45
-
46
-
47
-
48
-
49
-
50
-
51
-
52
-
53
-
54
-
55
-
56
-
57
-
58
-
59
-
60
-
61
-
62
-
63
-
64
-
65
-
66
-
67
-
68
-
69
-
70
-
71
-
72
-
73
-
74
-
75
-
76
-
77
-
78
-
79
-
80
-
81
-
82
-
83
-
84
-
85
-
86
-
87
-
88
-
89
-
90
-
91
-
92
-
93
-
94
-
95
-
96
-
97
-
98
-
99
-
100
-
101
-
102
-
103
-
104
-
105
-
106
-
107
-
108
-
109
-
110
-
111
-
112
-
113
-
114
-
115
-
116
-
117
-
118
-
119
-
120
-
121
-
122
-
123
-
124
-
125
-
126
-
127
-
128
-
129
-
130
-
131
-
132
-
133
-
134
-
135
-
136
-
137
-
138
 |
 |
HP ProtectTools
Getting Started