Understanding Security Roles; Managing Protecttools Passwords - HP dc5700 - Microtower PC Manual

Understanding Security Roles

In managing computer security (particularly for large organizations), one important practice is to divide
responsibilities and rights among various types of administrators and users.
NOTE
person.
For ProtectTools, the security duties and privileges can be divided into the following roles:
● Security officer—Defines the security level for the company or network and determines the security
features to deploy, such as Java Cards, biometric readers, or USB tokens.
NOTE
cooperation with HP. For more information, visit http://www.hp.com.
●
IT administrator—Applies and manages the security features defined by the security officer. Can
also enable and disable some features. For example, if the security officer has decided to deploy
Java Cards, the IT administrator can enable Java Card BIOS security mode.
●
User—Uses the security features. For example, if the security officer and IT administrator have
enabled Java Cards for the system, the user can set the Java Card PIN and use the card for
authentication.
Administrators are encouraged to perform "best practices" in restricting end-user privileges and
restrictive access to users.

Managing ProtectTools Passwords

Most of the ProtectTools Security Manager features are secured by passwords. The following table lists
the commonly used passwords, the software module where the password is set, and the password
function.
The passwords that are set and used by IT administrators only are indicated in this table as well. All
other passwords may be set by regular users or administrators.
Table 1-1 Password Management
ProtectTools Password
Computer Setup administrator
password
NOTE
administrator, F10 Setup, or
Security Setup password
Power-On password
2 Chapter 1 Introduction
In a small organization or for individual use, these roles may all be held by the same
Many of the features in ProtectTools can be customized by the security officer in
Set in this ProtectTools Module
BIOS Configuration, by IT administrator
Also known as BIOS
BIOS Configuration
Function
Protects access to the BIOS Computer
Setup utility and security settings.
HP ProtectTools Power-On
Authentication Support is a TPM-based
security tool designed to prevent
unauthorized access to the computer as
it is powered on. Power-On
Authentication Support uses the HP
ProtectTools Embedded Security Basic
User password. Once Power-On
Authentication is enabled in Computer
Setup, the password is set when the first/
ENWW