Working With Bios Configuration Profiles; Enabling Profiles - HP Compaq NC4010 Features Manual

Smart card pre-boot authentication
BIOS Configuration for HP ProtectTools is supported on most HP business notebooks, desktops and
workstations.

Working with BIOS Configuration Profiles

The BIOS Configuration for HP ProtectTools module contains the ability to create and manage
profiles. Profiles allow the administrator to configure the BIOS security settings and save the settings
to a file. This file can then be imported into other computer. Profiles also allow the administrator to
create situation specific security settings, and then load the appropriate profile when needed.
(Example: Create a home profile that uses less stringent security but is convenient to use and a
separate travel profile with more stringent security.)

Enabling Profiles

1. Start the Command Line window by selecting Start\Run and entering "cmd"
2. Type "C:\Program Files\HPQ\HP BIOS Configuration for ProtectTools\Hpqsetup.exe" /p
Hpqsetup command line Switches
/f = Specify INI file path
/k = Specify password for decrypting the INI file created with the HP BIOS
Configuration for ProtectTools
e.g. Hpqsetup.exe /fc:\test.ini /kpassword
/p = displays the "profiles page" on the BIOS security add-in module, which is
hidden by default.
e.g. hpqsetup.exe /p
Requires a user to insert a smart card
and, optionally, enter a PIN to
authenticate prior to an operating
system being allowed to load
Ties a hard drive to a specific system
with a specific embedded security
chip, preventing other systems from
accessing the hard drive if it is
physically removed from the original
system.
Protects a system from unauthorized
access by requiring a user to insert
their smart card to boot the system.
The same smart card used to
authenticate a user in the pre-boot
environment can also be used with HP
ProtectTools to login into Microsoft
Windows ® XP or Windows 2000.
®
10