HP dc73 Protect Tools User Guide - Page 63

Short description

Details

Solution

Windows password from Credential

Manager, the administrator gets an error

logon failure:

User account restriction

.

local PC, Credential Manager can only change the

password used to log in.

Credential Manager

Single Sign On default

settings should be set to

prompt to prevent loop.

Single Sign On default is set to log users

automatically. However, when creating

the second of two different password-

protected documents, Credential

Manager uses the last password

recorded—the one from the first

document.

HP is researching a workaround for future product

enhancements.

Incompatibility issues with

Corel WordPerfect 12

password gina.

If the user logs in to Credential Manager,

creates a document in WordPerfect and

saves with password protection,

Credential Manager cannot detect or

recognize, either manually or

automatically, the password gina.


enhancements.

Credential Manager does

not recognize the

Connect

button on

screen.

If the Single Sign On credentials for

Remote Desktop Connection (RDP) are

set to

Connect

, Single Sign On, upon

relaunch, always enters

Save As

instead

of

Connect

.


enhancements.

ATI Catalyst configuration

wizard is not usable with

Credential Manager.

Credential Manager Single Sign On

conflicts with the ATI Catalyst configure

wizard.

Disable the Credential Manager Single Sign On.

When logging in using

TPM authentication, the

Back

button on screen

skips the option to choose

another authentication

method.

If user using TPM login authentication for

Credential Manager enters his/her

password, the

Back

button does not

work properly, but instead immediately

displays the Windows login screen.


enhancements.

Credential Manager

opens out of standby

when it is configured not

to.

When

use Credential Manager log on

to Windows

is not selected as an option,

allowing the system to go into S3

suspend and then waking the system

causes the Credential Manager logon to

Windows to open.

With no administrator password set, user cannot log on

to Windows through Credential Manager because of

account restrictions invoked by the Credential

Manager.

●

Without Java Card/token, user can cancel the

Credential Manager login and user will see the

Microsoft Windows login. User can log in at this

point.

●

With Java Card/token, the following workaround

allows the user to enable/disable opening of

Credential Manager upon Java Card insertion.

1.

Click

Advanced Settings

.

2.

Click

Service & Applications

.

3.

Click

Java Cards and Tokens

.

4.

Click when Java Card/token is inserted.

5.

Select the

Advise to log-on

checkbox.

Users lose all Credential

Manager credentials

protected by the TPM, if

the TPM module is

removed or damaged.

If the TPM module is removed or

damaged, users lose all credentials

protected by the TPM.

This is as designed.

The TPM Module is designed to protect the Credential

Manager credentials. HP recommends that the user

back up identity from Credential Manager prior to

removing the TPM module.

ENWW

Credential Manager for ProtectTools

57

Section	Page
Introduction to security	7
HP ProtectTools features	8
Accessing HP ProtectTools Security	9
Achieving key security objectives	10
Protecting against targeted theft	10
Restricting access to sensitive data	10
Preventing unauthorized access from internal or external locations	10
Creating strong password policies	11
Additional security elements	12
Assigning security roles	12
Managing HP ProtectTools passwords	12
Creating a secure password	14
HP ProtectTools Backup and Restore	14
Backing up credentials and settings	14
Restoring credentials	15
Configuring settings	16
Credential Manager for HP ProtectTools	17
Setup procedures	18
Logging on to Credential Manger	18
Using the Credential Manager Logon Wizard	18
Logging on for the first time	19
Registering credentials	19
Registering fingerprints	19
Setting up the fingerprint reader	20
Using your registered fingerprint to log on to Windows	20
Registering a Java Card, USB eToken, or virtual token	20
Registering a USB eToken	20
Registering other credentials	20
General tasks	21
Creating a virtual token	21
Changing the Windows logon password	21
Changing a token PIN	21
Managing identity	22
Clearing an identity from the system	22
Locking the computer	23
Using Windows Logon	23
Logging on to Windows with Credential Manager	23
Adding an account	23
Removing an account	24
Using Single Sign On	24
Registering a new application	24
Using automatic registration	24
Using manual (drag and drop) registration	25
Managing applications and credentials	25
Modifying application properties	25
Removing an application from Single Sign On	25
Exporting an application	25
Importing an application	26
Modifying credentials	26
Using Application Protection	26
Restricting access to an application	27
Removing protection from an application	27
Changing restriction settings for a protected application	27
Advanced tasks (administrator only)	29
Specifying how users and administrators log on	29
Configuring custom authentication requirements	30
Configuring credential properties	30
Configuring Credential Manager settings	31
Example 1—Using the “Advanced Settings” page to allow Windows logon from Credential Manager	31
Example 2—Using the “Advanced Settings” page to require user verification before Single Sign On	32
Embedded Security for HP ProtectTools	33
Setup procedures	34
Enabling the embedded security chip	34
Initializing the embedded security chip	35
Setting up the basic user account	36
General tasks	37
Using the Personal Secure Drive	37
Encrypting files and folders	37
Sending and receiving encrypted e-mail	37
Changing the Basic User Key password	38
Advanced tasks	39
Backing up and restoring	39
Creating a backup file	39
Restoring certification data from the backup file	39
Changing the owner password	40
Resetting a user password	40
Enabling and disabling Embedded Security	40
Permanently disabling Embedded Security	40
Enabling Embedded Security after permanent disable	40
Migrating keys with the Migration Wizard	41
Java Card Security for HP ProtectTools	42
General tasks	43
Changing a Java Card PIN	43
Selecting the card reader	43
Advanced tasks (administrators only)	44
Assigning a Java Card PIN	44
Assigning a name to a Java Card	45
Setting power-on authentication	45
Enabling Java Card power-on authentication and creating an administrator Java Card	46
Creating a user Java Card	47
Disabling Java Card power-on authentication	47
BIOS Configuration for HP ProtectTools	48
General tasks	49
Managing boot options	49
Enabling and disabling system configuration options	50
Advanced tasks	52
Managing HP ProtectTools add-on module settings	52
Enabling and disabling smart card power-on authentication support	52
Enabling and disabling power-on authentication support for Embedded Security	53
Enabling and disabling DriveLock hard drive protection	54
Using DriveLock	54
DriveLock Applications	54
Managing Computer Setup passwords	55
Setting the power-on password	55
Changing the power-on password	55
Setting the setup password	55
Changing the setup password	56
Setting password options	56
Enabling and disabling stringent security	56
Enabling and disabling power-on authentication on Windows restart	56
Drive Encryption for HP ProtectTools	58
Encryption management	59
User management	60
Recovery	61
Troubleshooting	62
Credential Manager for ProtectTools	62
Embedded Security for ProtectTools	66
Miscellaneous	72
Glossary	74

HP dc73 Protect Tools User Guide - Page 63

Credential Manager for ProtectTools, Short description, Details, Solution

Page 63 highlights