Embedded Security For Hp Protecttools - HP Compaq 2210b User Manual

Embedded Security for HP ProtectTools

Short description
Encrypting folders,
subfolders, and files on
PSD causes an error
message.
Cannot Take Ownership
With Another OS In
MultiBoot Platform.
An unauthorized
administrator can view,
delete, rename, or move
the contents of encrypted
EFS folders.
The user has no encrypt
options when attempting
to restore the hard drive
using FAT32.
The user is able to encrypt
or delete the recovery
archive XML file.
Embedded Security EFS
interaction with Symantec
Antivirus or Norton
Antivirus produces longer
encryption/decryption and
scan times.
The emergency recovery
archive cannot be saved
to removable media.
66 Chapter 8 Troubleshooting
Details
If the user copies files and folders to the
PSD and tries to encrypt folders/files or
folders/subfolders, the Error Applying
Attributes message is displayed. The
user can encrypt the same files on the C:
\ drive or an extra installed hard drive.
If a drive is set up for multiple OS boot,
ownership can only be taken with the
platform initialization wizard in one
operating system.
Encrypting a folder does not stop an
unauthorized user with administrative
rights to view, delete, or move contents
of the folder.
If the user attempts to restore the hard
drive using FAT32, there will be no
encrypt options for any files/folders using
EFS.
By design, the ACLs for this folder are not
set; therefore, a user can inadvertently or
purposely encrypt or delete the file, thus
making it inaccessible. After this file has
been encrypted or deleted, no one can
use the TPM software.
Encrypted files interfere with Symantec
Antivirus or Norton Antivirus 2005 virus
scan. During the scan process, the Basic
User password prompt asks the user for
a password every 10 files or so. If the
user does not type a password, the Basic
User password prompt times out,
allowing NAV2005 to continue with the
scan. Encrypting files using Embedded
Security EFS takes longer when
Symantec Antivirus or Norton Antivirus is
running.
If the user inserts a MultiMediaCard or
Secure Digital (SD) Memory Card when
creating the emergency recovery archive
path during Embedded Security
initialization, an error message is
displayed.
Solution
This is as designed.
Moving files/folders to the PSD automatically encrypts
them. There is no need to "double-encrypt" the files/
folders. Attempting to double-encrypt them on the PSD
using EFS produces this error message.
This is as designed, for security reasons.
This is as designed.
It is a feature of EFS, not the Embedded Security TPM.
Embedded Security uses Microsoft EFS software, and
EFS preserves file/folder access rights for all
administrators.
This is as designed. Software should not be installed
on a restore with a FAT32 partition.
Microsoft EFS is supported only on NTFS and does not
function on FAT32. This is a feature of Microsoft EFS
and is not related to HP ProtectTools software.
This is as designed.
Users have access rights to an emergency archive so
that they can save/update their Basic User Key backup
copy. Users should be instructed never to encrypt or
delete the recovery archive files.
To reduce the time required to scan Embedded
Security EFS files, the user can either type the
encryption password before scanning or decrypt before
scanning.
To reduce the time required to encrypt/decrypt data
using Embedded Security EFS, the user should disable
Auto-Protect on Symantec Antivirus or Norton
Antivirus.
This is as designed.
Storage of the recovery archive on removable media is
not supported. The recovery archive can be stored on
a network drive or on another local drive other than the
C drive.
ENWW