Additional Security Elements; Assigning Security Roles; Managing Hp Protecttools Passwords - HP ProBook 4325s - Notebook PC User Manual

Additional security elements

Assigning security roles

In managing computer security (particularly for large organizations), one important practice is to divide
responsibilities and rights among various types of administrators and users.
NOTE: In a small organization or for individual use, these roles may all be held by the same person.
For HP ProtectTools, the security duties and privileges can be divided into the following roles:
●
Security officer—Defines the security level for the company or network and determines the security
features to deploy, such as Java™ Cards, biometric readers, or USB tokens.
NOTE:
cooperation with HP. For more information, see the HP Web site at http://www.hp.com.
● Administrator—Applies and manages the security features defined by the security officer. Can also
enable and disable some features. For example, if the security officer has decided to deploy Java
Cards, the IT administrator can enable Java Card BIOS security mode.
●
User—Uses the security features. For example, if the security officer and IT administrator have
enabled Java Cards for the system, the user can set the Java Card PIN and use the card for
authentication.
CAUTION:
and restricting user access.
Unauthorized users should not be granted administrative privileges.

Managing HP ProtectTools passwords

Most of the HP ProtectTools Security Manager features are secured by passwords. The following table
lists the commonly used passwords, the software module where the password is set, and the password
function.
The passwords that are set and used by IT administrators only are indicated in this table as well. All
other passwords may be set by regular users or administrators.
HP ProtectTools password
Windows Logon password
Security Manager Backup and
Recovery password
Java™ Card PIN
Many of the features in HP ProtectTools can be customized by the security officer in
Administrators are encouraged to follow "best practices" in restricting end-user privileges
Set in the following
module
Windows® Control Panel or
HP ProtectTools Security
Manager
Security Manager, by
individual user
Java Card Security
Function
Can be used for manual logon and for
authentication to access various Security
Manager features.
Protects access to the Security Manager
Backup and Recovery file.
Protects access to the Java Card contents
and authenticates users of the Java Card.
When used for power-on authentication, the
Java Card PIN also protects access to the
Computer Setup utility and to the computer
contents.
Authenticates users of Drive Encryption, if
the Java Card token is selected.
Additional security elements 5