HP Tc4400 - Compaq Tablet PC Reference Manual
  1. Manuals
  2. Brands
  3. HP Manuals
  4. Laptop Accessories
  5. Compaq tc4400
  6. Reference manual

HP Tc4400 - Compaq Tablet PC Reference Manual

Protecttools security manager
Hide thumbs Also See for Tc4400 - Compaq Tablet PC:
Table of Contents

Advertisement

Quick Links

Download this manual See also: Troubleshooting Manual, Maintenance and Service Manual
Reference Guide

ProtectTools Security Manager

Document Part Number: 389171-003
February 2006

Advertisement

Table of Contents
loading

Related Manuals for HP Tc4400 - Compaq Tablet PC

Summary of Contents for HP Tc4400 - Compaq Tablet PC

  • Page 1: Protecttools Security Manager

    Reference Guide ProtectTools Security Manager Document Part Number: 389171-003 February 2006...
  • Page 2 © Copyright 2005, 2006 Hewlett-Packard Development Company, L.P. Microsoft and Windows are U.S. registered trademarks of Microsoft Corporation. Java is a U.S. trademark of Sun Microsystems, Inc. Intel is a trademark or registered trademark of Intel Corporation or its subsidiaries in the United States and other countries.

  • Page 3: Table Of Contents

    Contents 1 Introduction ProtectTools Security Manager ....1–1 Accessing the ProtectTools Security Manager ..1–2 Understanding Security Roles ..... 1–3 Managing ProtectTools Passwords .
  • Page 4 Contents 3 Java Card Security for ProtectTools Basic concepts ....... . . 3–1 General tasks .
  • Page 5 Contents 5 BIOS Configuration for ProtectTools Basic concepts ....... . . 5–1 General tasks .

  • Page 6: Introduction

    Introduction ProtectTools Security Manager ProtectTools Security Manager software provides security features that help protect against unauthorized access to the computer, networks, and critical data. Enhanced security functionality is provided by the following software modules: Smart Card Security for ProtectTools Java Card Security for ProtectTools Embedded Security for ProtectTools BIOS Configuration for ProtectTools Credential Manager for ProtectTools...

  • Page 7: Accessing The Protecttools Security Manager

    Introduction Accessing the ProtectTools Security Manager To access the ProtectTools Security Manager from the Microsoft® Windows® Control Panel: » Select Start > All Programs > HP ProtectTools Security Manager. After you have configured the Credential Manager module, you can also open ProtectTools by logging on to Credential Manager directly from the Windows logon screen.

  • Page 8: Understanding Security Roles

    Introduction Understanding Security Roles In managing computer security (particularly for large organizations), one important practice is to divide responsibilities and rights among various types of administrators and users. In a small organization or for individual use, these roles may all be held by the same person. For ProtectTools, the security duties and privileges can be divided into the following roles: Security officer—Defines the security level for the company...

  • Page 9: Managing Protecttools Passwords

    Introduction Managing ProtectTools Passwords Most of the ProtectTools Security Manager features are secured by passwords. The following table lists the commonly used passwords, the software module where the password is set, and the password function. The passwords that are set and used by IT administrators only are indicated in this table as well.
  • Page 10 Introduction Set in this ProtectTools Password ProtectTools Module Function Smart card administrator Smart Card Security, Used for smart card password power-on (BIOS) by IT administrator authentication. Allows Also known as BIOS access to the Computer administrator card Setup utility and the password.
  • Page 11 Introduction Set in this ProtectTools Password ProtectTools Module Function Java™ Card PIN Java Card Security Protects access to the Java Card contents and authenticates users of the Java Card. When used for power-on authentication, the Java Card PIN also protects access to the Computer Setup utility and to the computer contents.
  • Page 12 Introduction Set in this ProtectTools Password ProtectTools Module Function Credential Manager logon Credential Manager This password offers password 2 options: It can be used in a separate logon to access Credential Manager after logging on to Microsoft Windows. It can be used in place of the Windows logon process, allowing access to...

  • Page 13: Creating A Secure Password

    Introduction Creating a Secure Password When creating passwords, you must first follow any specifications that are set by the program. In general, however, consider the following guidelines to help you create strong passwords and reduce the chances of your password being compromised: Use passwords with more than 6 characters, preferably more than 8.

  • Page 14: Smart Card Security For Protecttools

    Smart Card Security for ProtectTools Basic concepts Smart Card Security for ProtectTools manages the smart card setup and configuration for computers equipped with an optional smart card reader. With Smart Card Security, you can Access smart card security features. Initialize a smart card so that it can be used with other ProtectTools modules, such as Credential Manager for ProtectTools.

  • Page 15: Initializing The Smart Card

    Smart Card Security for ProtectTools Initializing the smart card You must initialize the smart card before using it. To initialize the smart card: 1. Insert the smart card into the reader. 2. Select Start > All Programs > HP ProtectTools Security Manager.

  • Page 16: Smart Card Bios Security Mode

    Smart Card Security for ProtectTools Smart card BIOS security mode When enabled, smart card BIOS security mode requires you to use a smart card to start the computer. The process of enabling smart card BIOS security mode involves the following steps: 1.

  • Page 17: Enabling Smart Card Bios Security Mode And Setting The Smart Card Administrator Password

    Smart Card Security for ProtectTools Enabling smart card BIOS security mode and setting the smart card administrator password To enable smart card BIOS security mode and set the smart card administrator password: 1. Select Start > All Programs > HP ProtectTools Security Manager.
  • Page 18 Smart Card Security for ProtectTools Disabling smart card BIOS security mode When disabling smart card BIOS security mode, the smart card administrator and user passwords are disabled, and the use of the smart card is no longer needed to access the computer. If smart card BIOS security mode has previously been enabled, the button on the “Smart Card Security BIOS”...

  • Page 19: Changing The Smart Card Administrator Password

    Smart Card Security for ProtectTools Changing the smart card administrator password The smart card administrator password is set as part of the process for enabling smart card BIOS security mode. You can change the smart card administrator password after it has been set.

  • Page 20: Setting And Changing The Smart Card User Password

    Smart Card Security for ProtectTools Setting and changing the smart card user password To set or change the smart card user password: 1. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, select Smart Card Security, and then select BIOS.

  • Page 21: Storing The Administrator Or User Card Password

    Smart Card Security for ProtectTools 7. Under Boot Requirements, select the check box if you require the smart card PIN to be entered at startup. If you do not require the smart card PIN to be entered at startup, clear this check box. 8.
  • Page 22 Smart Card Security for ProtectTools 4. In the right pane, under BIOS Password on Smart Card, click Store. 5. In the BIOS Password Wizard, you can either Enter a password manually. Generate a random 32-byte password. Using a known password enables you to create duplicate cards without using a recovery file.

  • Page 23: General Tasks

    Smart Card Security for ProtectTools General tasks Updating BIOS smart card settings To require a smart card PIN when you restart the computer: 1. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, select Smart Card Security, and then select BIOS.

  • Page 24: Changing The Smart Card Pin

    Smart Card Security for ProtectTools Changing the smart card PIN To change the smart card PIN: 1. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, select Smart Card Security, and then select Smart Card. 3.
  • Page 25 Smart Card Security for ProtectTools Creating a recovery file To create a recovery file: 1. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, select Smart Card Security, and then select Smart Card. 3. In the right pane, under Recovery, click Create. 4.
  • Page 26 Smart Card Security for ProtectTools Restoring smart card data You can restore the smart card data from the recovery file. This is especially useful if a card was lost or stolen, or if you want to create a backup smart card. If you use a card with previous data saved on it, the data will be overwritten.
  • Page 27 Smart Card Security for ProtectTools Creating a backup smart card It is highly recommended that you create duplicate smart cards for backup purposes. Two methods can be used to create a backup card, depending upon whether the smart card password was manually or randomly generated.

  • Page 28: Java Card Security For Protecttools

    Java Card Security for ProtectTools Basic concepts Java Card Security for ProtectTools manages the Java Card setup and configuration for computers equipped with an optional smart card reader. With Java Card Security, you can Access Java Card security features. Work with the Computer Setup utility to enable Java Card authentication in a power-on environment, and to configure separate Java Cards for an administrator and a user.

  • Page 29: General Tasks

    Java Card Security for ProtectTools General tasks The “General” page allows you to perform the following tasks: Change a Java Card PIN Select the smart card reader The smart card reader uses both Java Cards and smart cards. This feature is available if you have more than one smart card reader on the computer.

  • Page 30: Selecting The Smart Card Reader

    Java Card Security for ProtectTools Selecting the smart card reader Ensure that the correct smart card reader is selected in Java Card Security before using the Java Card. If the correct reader is not selected in Java Card Security, some of the features may be unavailable or incorrectly displayed.

  • Page 31: Advanced Tasks (Administrators Only)

    Java Card Security for ProtectTools Advanced tasks (administrators only) The “Advanced” page allows you to perform the following tasks: Assign a Java Card PIN Assign a name to a Java Card Set power-on authentication Back up and restore Java Cards You must have a Computer Setup setup password in order to get to the “Advanced”...

  • Page 32: Assigning A Name To A Java Card

    Java Card Security for ProtectTools Assigning a name to a Java Card You must assign a name to a Java Card before it can be used for power-on authentication. To assign a name to a Java Card: 1. Select Start > All Programs > HP ProtectTools Security Manager.

  • Page 33: Setting Power-On Authentication

    Java Card Security for ProtectTools Setting power-on authentication When enabled, power-on authentication requires you to use a Java Card to start the computer. The process of enabling Java Card power-on authentication involves the following steps: 1. Enable Java Card power-on authentication support in BIOS Configuration or Computer Setup.
  • Page 34 Java Card Security for ProtectTools Enabling Java Card power-on authentication and creating an administrator Java Card To enable Java Card power-on authentication: 1. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, select Java Card Security, and then select Advanced.
  • Page 35 Java Card Security for ProtectTools b. If applicable, enter your DriveLock user password in the DriveLock password box, and then enter it again in the Confirm password box. c. Enter the Java Card PIN. d. Click OK. 7. When you are prompted to create a recovery file, refer to “Creating a recovery file,”...
  • Page 36 Java Card Security for ProtectTools Disabling Java Card power-on authentication When you disable Java Card power-on authentication, the use of the Java Card is no longer needed to access the computer. To disable Java Card power-on authentication: 1. Select Start > All Programs > HP ProtectTools Security Manager.

  • Page 37: Backing Up And Restoring Java Cards

    Java Card Security for ProtectTools Backing up and restoring Java Cards After you have assigned power-on authentication identity to a Java Card, it is highly recommended that you create a Java Card recovery file. The recovery file can be used to transfer the Java Card power-on authentication identity data from one Java Card to another Java Card.
  • Page 38 Java Card Security for ProtectTools 5. Enter the file path and file name in the Filename box. Ä To avoid loss of access to the computer, do not save the recovery file on the computer hard drive; you will not be able to access the file without the Java Card.
  • Page 39 Java Card Security for ProtectTools 4. Insert the diskette or other media containing the Java Card recovery file. 5. Insert a Java Card into the reader. If the card has not been assigned a PIN, you will be prompted to create a PIN. For detailed instructions on assigning a PIN to the Java Card, refer to “Assigning a Java Card...

  • Page 40: Embedded Security For Protecttools

    Embedded Security for ProtectTools Basic concepts The integrated Trusted Platform Module (TPM) embedded security chip must be installed in your computer to use Embedded Security for ProtectTools. Embedded Security for ProtectTools protects against unauthorized access to user data or credentials. This software module provides the following security features: Enhanced Microsoft Encryption File System (EFS) file and folder encryption...

  • Page 41: Setup Procedures

    Embedded Security for ProtectTools The TPM embedded security chip enhances and enables other ProtectTools Security Manager security features. For example, Credential Manager for ProtectTools can use the embedded chip as an authentication factor when the user logs on to Windows. On select models, the TPM embedded security chip also enables enhanced BIOS security features accessed through BIOS Configuration for ProtectTools.

  • Page 42: Initializing The Embedded Security Chip

    Embedded Security for ProtectTools 5. Under Embedded Security, if the device is hidden, select Available. 6. Select Embedded security device state and change to Enable. 7. Press to accept the changes to the Embedded Security configuration. 8. To save your preferences and exit Computer Setup, use the arrow keys to select File >...

  • Page 43: Setting Up The Basic User Account

    Embedded Security for ProtectTools 6. Click Browse and choose the location for the emergency recovery archive, and then click Next. 7. Click Next on the “Summary” page. If you do not want to set up a basic user account at this time, clear the Start the Embedded Security User Initialization Wizard check box, and then click Finish.
  • Page 44 Embedded Security for ProtectTools 3. In the right pane, under Embedded Security Features, click Configure. The Embedded Security User Initialization Wizard opens. 4. Click Next. 5. Set and confirm the Basic User Key password, and then click Next. 6. Click Next to confirm settings. 7.

  • Page 45: General Tasks

    Embedded Security for ProtectTools General tasks After the basic user account is set up, you can perform the following tasks: Encrypting files and folders Sending and receiving encrypted e-mail Using the Personal Secure Drive After setting up the PSD, you are prompted to enter the Basic User Key password at the next logon.

  • Page 46: Sending And Receiving Encrypted E-Mail

    Embedded Security for ProtectTools To encrypt files and folders: 1. Right-click the file or folder that you want to encrypt. 2. Click Encrypt. 3. Click one of the following options: Apply changes to this folder only. Apply changes to this folder, subfolders, and files. 4.

  • Page 47: Advanced Tasks

    Embedded Security for ProtectTools Advanced tasks Backing up and restoring The Embedded Security backup feature creates an archive that contains certification information to be restored in case of emergency. Creating a backup file To create a backup file: 1. Select Start > All Programs > HP ProtectTools Security Manager.
  • Page 48 Embedded Security for ProtectTools Restoring certification data from the backup file To restore data from the backup file: 1. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, select Embedded Security, and then select Backup.

  • Page 49: Changing The Owner Password

    Embedded Security for ProtectTools Changing the owner password To change the owner password: 1. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, select Embedded Security, and then select Advanced. 3. In the right pane, under Owner Password, click Change. 4.

  • Page 50: Migrating Keys With The Migration Wizard

    Embedded Security for ProtectTools Permanently disabling Embedded Security To permanently disable Embedded Security: 1. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, select Embedded Security, and then select Advanced. 3. In the right pane, under Embedded Security, click Disable. 4.

  • Page 51: Bios Configuration For Protecttools

    BIOS Configuration for ProtectTools Basic concepts BIOS Configuration for ProtectTools provides access to the Computer Setup utility security and configuration settings. This gives users Windows access to system security features that are managed by Computer Setup. With BIOS Configuration, you can Manage power-on passwords and setup passwords.

  • Page 52: General Tasks

    BIOS Configuration for ProtectTools General tasks BIOS Configuration allows you to manage various computer settings that would otherwise be accessible only by pressing startup and entering the Computer Setup utility. Managing boot options You can use BIOS Configuration to manage various settings for tasks that run when you turn on or restart the computer.

  • Page 53: Enabling And Disabling System Configuration

    BIOS Configuration for ProtectTools Enabling and disabling system configuration options Some of the items listed below may not be supported by your computer. To enable or disable system configuration options: 1. Select Start > All Programs > HP ProtectTools Security Manager.
  • Page 54 BIOS Configuration for ProtectTools Internal Network Adapter Boot Internal Network Adapter Boot Mode (PXE or RPL) Boot Order Device Configurations NumLock at Boot Swapping Fn/Ctrl Keys Multiple Pointing Devices USB Legacy Support Parallel port mode (standard, bidirectional, EPP, or ECP) Data Execution Prevention SATA Native Mode Dual Core CPU...

  • Page 55: Advanced Tasks

    BIOS Configuration for ProtectTools Advanced tasks Managing ProtectTools settings Some of the features of ProtectTools Security Manager can be managed in BIOS Configuration. Enabling and disabling Smart card or Java Card power-on authentication support Enabling this option allows you to use the smart card or the Java Card for user authentication when you turn on the computer.
  • Page 56 BIOS Configuration for ProtectTools Enabling and disabling power-on authentication support for Embedded Security Enabling this option allows the system to use the TPM embedded security chip (if available) for user authentication when you turn on the computer. To fully enable the power-on authentication feature, you must also configure the TPM embedded security chip using the Embedded Security for ProtectTools module.
  • Page 57 BIOS Configuration for ProtectTools Enabling and disabling Automatic DriveLock hard drive protection When this option is enabled, the DriveLock passwords will be automatically generated and set in the drive, and protected by the TPM embedded security chip. The automatically generated passwords will not be set in the drive until the computer is restarted and you successfully enter the TPM embedded security password at the password prompt.

  • Page 58: Managing Computer Setup Passwords

    BIOS Configuration for ProtectTools 4. In the left pane, select Security. 5. Under Embedded Security, select Enable next to Automatic DriveLock Support. To disable automatic DriveLock protection for Embedded Security, select Disable. 6. Click Apply, and then click OK in the ProtectTools window to save your changes.
  • Page 59 BIOS Configuration for ProtectTools Setting the power-on password To set the power-on password: 1. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, select BIOS Configuration, and then select Security. 3. In the right pane, next to Power-On Password, click Set. 4.
  • Page 60 BIOS Configuration for ProtectTools Setting the setup password To set the Computer Setup setup password: 1. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, select BIOS Configuration, and then select Security. 3. In the right pane, next to Setup Password, click Set. 4.
  • Page 61 BIOS Configuration for ProtectTools Setting password options You can use BIOS Configuration for ProtectTools to set password options to enhance the security of your system. Enabling and disabling stringent security Ä CAUTION: To prevent the computer from becoming permanently unusable, record your configured setup password, power-on password, or smart card PIN in a safe place away from your computer.
  • Page 62 BIOS Configuration for ProtectTools Enabling and disabling power-on authentication on Windows restart This option allows you to enhance security by requiring users to enter a power-on, TPM, or smart card password when Windows restarts. To enable or disable power-on authentication on Windows restart: 1.

  • Page 63: Credential Manager For Protecttools

    Credential Manager for ProtectTools Basic concepts Credential Manager for ProtectTools has security features that provide protection against unauthorized access to your computer. These features include the following: Alternatives to passwords when logging on to Microsoft Windows, such as using a smart card or biometric reader to log on to Windows.

  • Page 64: Setup Procedures

    Credential Manager for ProtectTools Setup procedures Logging on to Credential Manger Depending upon the configuration, you can log on to Credential Manager in any of the following ways: Credential Manager Logon Wizard (preferred) Credential Manager icon in the notification area ProtectTools Security Manager If you use the Credential Manager Logon prompt on the Windows Logon screen to log in to Credential Manager, you...
  • Page 65 Credential Manager for ProtectTools Using the Credential Manager Logon Wizard To log on to Credential Manger using the Credential Manager Logon Wizard: 1. Open the Credential Manager Logon Wizard in any of the following ways: From the Windows logon screen From the notification area, by double-clicking the ProtectTools icon.
  • Page 66 Credential Manager for ProtectTools Creating a new account You can use the Credential Manager Logon Wizard to create a new user account. Before you begin, you must be logged on to Windows with an administrator account, but not logged on to Credential Manager.

  • Page 67: Registering Credentials

    Credential Manager for ProtectTools Registering credentials You can use the “My Identity” page to register your various authentication methods, or credentials. After they have been registered, you can use these methods to log on to Credential Manager. Registering fingerprints A fingerprint reader allows you to log on to Microsoft Windows using a registered fingerprint in ProtectTools Security Manager instead of using a Windows password.
  • Page 68 Credential Manager for ProtectTools 3. On the “Introduce Yourself” page, click Next to accept the default user name. If there are other users registered on this computer, you can select the person whose fingerprints need to be registered by entering the Windows user name. 4.
  • Page 69 Credential Manager for ProtectTools 8. Click a different finger on the screen to register, and then repeat steps 6 and 7. Ä You must register at least 2 fingers in order to complete the setup. If you click Finish before registering at least 2 fingers, an error message is displayed.
  • Page 70 Credential Manager for ProtectTools Registering a smart card or token To register a smart card or token: 1. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, select Credential Manager, and then select My Identity. 3.

  • Page 71: General Tasks

    Credential Manager for ProtectTools General tasks All users have access to the “My Identity” page in Credential Manager. From the “My Identity” page, you can Create and register authentication credentials. Manage passwords. Manage Microsoft Network accounts. Manage single sign on credentials. Creating a virtual token A virtual token works very much like a smart card or USB token.

  • Page 72: Changing The Windows Logon Password

    Credential Manager for ProtectTools Changing the Windows logon password You can change your Windows logon password from the “My Identity” page in Credential Manager. 1. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, select Credential Manager, and then select My Identity.

  • Page 73: Managing Identity

    Credential Manager for ProtectTools Managing identity Backing up an identity It is recommended that you back up your identity in Credential Manager, in case of data loss or accidental removal. To back up an identity: 1. Select Start > All Programs > HP ProtectTools Security Manager.
  • Page 74 Credential Manager for ProtectTools Restoring an identity To restore an identity: 1. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, select Credential Manager, and then select My Identity. 3. In the right pane, under I Want To, click More, and then click Restore Identity.

  • Page 75: Locking The Computer

    Credential Manager for ProtectTools Locking the computer To secure your computer when you are away from your desk, use the Lock Workstation feature. This prevents unauthorized users from gaining access to your computer. Only you and members of the administrators group on your computer can unlock it. For added security, you can configure the Lock Workstation feature to require a smart card, biometric reader, or token to unlock the computer.

  • Page 76: Using Microsoft Network Logon

    Credential Manager for ProtectTools Using Microsoft Network logon You can use Credential Manager to log on to Windows, either at a local computer or on a network domain. When you log on to Credential Manager for the first time, the system automatically adds your local Windows user account as the network account for the Network Logon service.

  • Page 77: Removing Accounts

    Credential Manager for ProtectTools Adding accounts You can add additional local or domain accounts after logging on to Credential Manager. To add an account: 1. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, select Credential Manager, and then select My Identity.
  • Page 78 Credential Manager for ProtectTools 4. Click the account you want to remove, and then click Remove. 5. In the confirmation dialog box, click Yes. Setting a default user You can set or change the default user after logging on to Credential Manager.

  • Page 79: Using Single Sign On

    Credential Manager for ProtectTools Using Single Sign On Credential Manager has a Single Sign On feature that stores user names and passwords for multiple Internet and Windows applications, and automatically enters logon credentials when you access a registered application. Security and privacy are important features of Single Sign On. All credentials are encrypted and are available only after successful logon to Credential Manager.
  • Page 80 Credential Manager for ProtectTools 2. On the Credential Manager Single Sign On dialog box, click Options to configure the following settings for the registration: Do not suggest to use SSO with this site or application. Fill in credentials only. Do not submit. Ask confirmation before submitting credentials.
  • Page 81 Credential Manager for ProtectTools 8. Click Finish. 9. Enter the logon credential—for example, the user name and password—into the application box. 10. In the confirmation dialog box, confirm or modify the credential name, and then click Yes. Managing applications and credentials Modifying application properties To modify application properties: 1.
  • Page 82 Credential Manager for ProtectTools 3. In the right pane, under Single Sign On, click Manage Applications and Credentials. 4. Click the application entry you want to remove, and then click Remove. 5. Click Yes in the confirmation dialog box. 6. Click OK. Exporting applications You can export applications to create a backup copy of the Single Sign On application script.
  • Page 83 Credential Manager for ProtectTools Importing applications To import an application: 1. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, select Credential Manager, and then select My Identity. 3. In the right pane, under Single Sign On, click Manage Applications and Credentials.

  • Page 84: Advanced Tasks (Administrator Only)

    Credential Manager for ProtectTools Advanced tasks (administrator only) The “Authentication and Credentials” page and the “Advanced Settings” page of Credential Manager are available only to those users with administrator rights. From these pages, you can Specify how users and administrators log on. Configure credential properties.

  • Page 85: Configuring Custom Authentication Requirements

    Credential Manager for ProtectTools Configuring custom authentication requirements If the set of authentication credentials you want is not listed on the Authentication tab of the “Authentication and Credentials” page, you can create custom requirements. To configure custom requirements: 1. Select Start > All Programs > HP ProtectTools Security Manager.

  • Page 86: Configuring Credential Manager Properties

    Credential Manager for ProtectTools Configuring Credential Manager properties From the Credentials tab of the “Authentication and Credentials” page, you can view the list of available authentication methods, and modify the settings. To configure the credentials: 1. Select Start > All Programs > HP ProtectTools Security Manager.

  • Page 87: Configuring Credential Manager Settings

    Credential Manager for ProtectTools Configuring Credential Manager settings From the “Advanced Settings” page, you can access and modify various settings using the following tabs:. General—Allows you to modify the settings for basic configuration. Single Sign On—Allows you to modify the settings for how Single Sign On works for the current user, such as how it handles detection of logon screens, automatic logon to registered dialogs, and password display.
  • Page 88 Credential Manager for ProtectTools Example 1—Using the “Advanced Settings” Page to allow Windows logon from Credential Manager To enable logging on to Windows from Credential Manager: 1. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, select Credential Manager, and then select Advanced Settings.
  • Page 89 Glossary The following terms are used in this document and throughout the ProtectTools Security Manager. Authentication—Process of verifying whether a user is authorized to perform a task, for example, accessing a computer, modifying settings for a particular program, or viewing secured data.
  • Page 90 Glossary Cryptography—Practice of encrypting and decrypting data so that it can be decoded only by specific individuals. Decryption—Procedure used in cryptography to convert encrypted data into plain text. DriveLock—Security feature that links the hard drive to a user and requires the user to correctly enter the DriveLock password when the computer starts up.
  • Page 91 Glossary Migration—a task that allows the management, restoration, and transfer of keys and certificates. Network account—Windows user or administrator account, either on a local computer, in a workgroup, or on a domain. Personal secure drive (PSD)—Provides a protected storage area for sensitive data.
  • Page 92 Glossary Trusted Platform Module (TPM) embedded security chip (select models only)—Integrated security chip that can protect highly sensitive user information from malicious attackers. It is the root-of-trust in a given platform. The TPM provides cryptographic algorithms and operations that meets the Trusted Computing Group (TCG) specifications.
  • Page 93 Index BIOS Configuration for ProtectTools 5–1 account BIOS smart card security 2–3 basic user 4–4 BIOS user card password Credential Manager 6–4 definition 1–5 Automatic DriveLock 5–7 setting and changing 2–7 boot options 5–2 backup embedded security 4–8 Computer Setup administrator identity 6–11 password Java Card 3–12...
  • Page 94 Index power-on authentication 5–5 identity 6–11 smart card authentication initializing 5–5 embedded security chip smart card BIOS security 4–3 2–5 smart card 2–2 stringent security 5–11 system configuration Java Card options 5–3 assigning a name 3–5 changing a PIN 3–2 3–4 Embedded Security for PIN, definition 1–6...
  • Page 95 Index power-on authentication 3–6 smart card administrator enabling and disabling 5–5 password on Windows restart 5–12 changing 2–6 power-on password definition 1–5 definition 1–4 setting 2–3 setting and changing 5–9 smart card BIOS security 2–3 properties smart card PIN application 6–19 changing 2–11 authentication 6–22 definition 1–5...

This manual is also suitable for:

Nc4400 - notebook pc

Table of Contents