HP tc4400 User's Guide Page 1

Reference GuideProtectTools Security ManagerDocument Part Number: 389171-001May 2005

IntroductionReference Guide 1–5Profile password BIOS Configuration, by IT administratorEncrypts (and unlocks) the profile where BIOS system settings a

1–6 Reference GuideIntroductionBasic User Key password✎Also known as: Embedded Security passwordEmbedded Security When enabled as the BIOS power-on au

IntroductionReference Guide 1–7Creating a Secure PasswordWhen creating passwords, you must first follow any specifications that are set by the program

1–8 Reference GuideIntroduction Change passwords regularly. You might change only a couple of characters that increment. If you write down your pass

Reference Guide 2–12Smart Card Security forProtectToolsBasic ConceptsSmart Card Security for ProtectTools manages the smart card setup and configurati

2–2 Reference GuideSmart Card Security for ProtectToolsInitializing the Smart CardYou must initialize the smart card before using it.To initialize the

Smart Card Security for ProtectToolsReference Guide 2–3Smart Card BIOS Security ModeWhen enabled, smart card BIOS security mode requires you to use a

2–4 Reference GuideSmart Card Security for ProtectToolsEnabling Smart Card BIOS Security Modeand Setting the Smart Card Administrator PasswordTo enabl

Smart Card Security for ProtectToolsReference Guide 2–5Disabling Smart Card BIOS Security ModeWhen disabling smart card BIOS security mode, the smart

2–6 Reference GuideSmart Card Security for ProtectToolsChanging the Smart Card Administrator PasswordThe smart card administrator password is set as p

© Copyright 2005 Hewlett-Packard Development Company, L.P.Microsoft and Windows are U.S. registered trademarks of Microsoft Corporation. The informati

Smart Card Security for ProtectToolsReference Guide 2–7Setting and Changing the Smart Card User PasswordTo set or change the smart card user password:

2–8 Reference GuideSmart Card Security for ProtectTools7. Under Boot Requirements, select the check box if you require the smart card PIN to be entere

Smart Card Security for ProtectToolsReference Guide 2–94. Under BIOS Password on Smart Card, click Store.5. In the BIOS Password Wizard, you can eithe

2–10 Reference GuideSmart Card Security for ProtectToolsGeneral TasksUpdating BIOS Smart Card SettingsTo require a smart card PIN when you restart the

Smart Card Security for ProtectToolsReference Guide 2–11Changing the Smart Card PINTo change the smart card PIN:1. Select Start > All Programs >

2–12 Reference GuideSmart Card Security for ProtectToolsCreating a Recovery FileTo create a recovery file:1. Select Start > All Programs > HP Pr

Smart Card Security for ProtectToolsReference Guide 2–13Restoring Smart Card DataYou can restore the smart card data from the recovery file. This is e

2–14 Reference GuideSmart Card Security for ProtectToolsCreating a Backup Smart CardIt is highly recommended that you create duplicate smart cards for

Reference Guide 3–13Embedded Security forProtectToolsBasic Concepts✎The integrated Trusted Platform Module (TPM) embedded security chip must be instal

3–2 Reference GuideEmbedded Security for ProtectToolsThe TPM embedded security chip enhances and enables other ProtectTools Security Manager security

Reference Guide iiiContents1IntroductionProtectTools Security Manager . . . . . . . . . . . . . . . . . . . . 1–1Accessing the ProtectTools Security

Embedded Security for ProtectToolsReference Guide 3–34. In the Security menu, use the arrow keys to select Embedded Security, and then press enter.5.

3–4 Reference GuideEmbedded Security for ProtectTools6. Click Browse and choose the location for the emergency recovery archive, and then click Next.7

Embedded Security for ProtectToolsReference Guide 3–54. Set and confirm the Basic User Key password, and then click Next.5. Click Next to confirm sett

3–6 Reference GuideEmbedded Security for ProtectToolsGeneral TasksAfter the basic user account is set up, you can perform the following tasks: Encryp

Embedded Security for ProtectToolsReference Guide 3–7To encrypt files and folders:1. Right-click the file or folder that you want to encrypt.2. Click

3–8 Reference GuideEmbedded Security for ProtectToolsAdvanced TasksBacking Up and RestoringThe Embedded Security backup feature creates an archive tha

Embedded Security for ProtectToolsReference Guide 3–9Restoring Certification Data from the Backup FileTo restore data from the backup file:1. Select S

3–10 Reference GuideEmbedded Security for ProtectToolsChanging the Owner PasswordTo change the owner password:1. Select Start > All Programs > H

Embedded Security for ProtectToolsReference Guide 3–11Temporarily Disabling Embedded SecurityTo temporarily disable Embedded Security:1. Select Start

3–12 Reference GuideEmbedded Security for ProtectToolsEnabling Embedded Security After Permanent DisableTo enable Embedded Security after permanently

iv Reference GuideContents3 Embedded Security for ProtectToolsBasic Concepts. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3–1Setu

Reference Guide 4–14BIOS Configuration forProtectToolsBasic ConceptsBIOS Configuration for ProtectTools provides access to the Computer Setup utility

4–2 Reference GuideBIOS Configuration for ProtectToolsGeneral TasksBIOS Configuration allows you to manage various computer settings that would otherw

BIOS Configuration for ProtectToolsReference Guide 4–3Enabling and Disabling Device or Security OptionsTo enable or disable devices or security option

4–4 Reference GuideBIOS Configuration for ProtectToolsAdvanced TasksManaging ProtectTools SettingsSome of the features of ProtectTools Security Manage

BIOS Configuration for ProtectToolsReference Guide 4–5Enabling and Disabling Power-on Authentication Support for Embedded Security Enabling this optio

4–6 Reference GuideBIOS Configuration for ProtectToolsEnabling and Disabling Automatic DriveLock Hard Drive Protection When this option is enabled, th

BIOS Configuration for ProtectToolsReference Guide 4–7Managing ProfilesAfter you have set your preferences in BIOS Configuration for ProtectTools, you

4–8 Reference GuideBIOS Configuration for ProtectTools5. Enter hpqsetup.exe, and add switches to customize the request, as shown in the following tabl

BIOS Configuration for ProtectToolsReference Guide 4–9Saving a New Profile SchemeTo save a new profile scheme:1. Select Start > All Programs > H

4–10 Reference GuideBIOS Configuration for ProtectToolsApplying a Profile SchemeYou can apply any profile scheme to a new platform through HP BIOS Con

ContentsReference Guide v5 Credential Manager for ProtectToolsBasic Concepts. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5–1Setu

BIOS Configuration for ProtectToolsReference Guide 4–11Managing Computer Setup PasswordsYou can use BIOS Configuration to set and change the power-on

4–12 Reference GuideBIOS Configuration for ProtectToolsSetting the Power-On PasswordTo set the power-on password:1. Select Start > All Programs >

BIOS Configuration for ProtectToolsReference Guide 4–13Setting the Administrator PasswordTo set the Computer Setup administrator password:1. Select St

4–14 Reference GuideBIOS Configuration for ProtectToolsSetting Password OptionsYou can use BIOS Configuration for ProtectTools to set password options

BIOS Configuration for ProtectToolsReference Guide 4–15Enabling and Disabling Power-on Authentication on Windows RestartThis option allows you to enha

Reference Guide 5–15Credential Manager forProtectToolsBasic ConceptsCredential Manager for ProtectTools has security features that provide protection

5–2 Reference GuideCredential Manager for ProtectToolsSetup ProceduresLogging On to Credential MangerDepending upon the configuration, you can log on

Credential Manager for ProtectToolsReference Guide 5–3Using the Credential Manager Logon WizardTo log on to Credential Manger using the Credential Man

5–4 Reference GuideCredential Manager for ProtectToolsCreating a New AccountYou can use the Credential Manager Logon Wizard to create a new user accou

Credential Manager for ProtectToolsReference Guide 5–5Registering CredentialsYou can use the “My Identity” page to register your various authenticatio

Reference Guide 1–11IntroductionProtectTools Security Manager ProtectTools Security Manager software provides security features that help protect agai

5–6 Reference GuideCredential Manager for ProtectToolsRegistering a Smart Card or TokenTo register a smart card or token:1. Select Start > All Prog

Credential Manager for ProtectToolsReference Guide 5–7General TasksAll users have access to the “My Identity” page in Credential Manager. From the “My

5–8 Reference GuideCredential Manager for ProtectToolsChanging the Windows Logon PasswordYou can change your Windows logon password from the “My Ident

Credential Manager for ProtectToolsReference Guide 5–9Managing IdentityBacking Up an IdentityIt is recommended that you back up your identity in Crede

5–10 Reference GuideCredential Manager for ProtectToolsRestoring an IdentityTo restore an identity:1. Select Start > All Programs > HP ProtectTo

Credential Manager for ProtectToolsReference Guide 5–11Locking the ComputerTo secure your computer when you are away from your desk, use the Lock Work

5–12 Reference GuideCredential Manager for ProtectToolsUsing Microsoft Network LogonYou can use Credential Manager to log on to Windows, either at a l

Credential Manager for ProtectToolsReference Guide 5–13Adding AccountsYou can add additional local or domain accounts after logging on to Credential M

5–14 Reference GuideCredential Manager for ProtectToolsSetting a Default UserYou can set or change the default user after logging on to Credential Man

Credential Manager for ProtectToolsReference Guide 5–15Using Single Sign OnCredential Manager has a Single Sign On feature that stores user names and

1–2 Reference GuideIntroductionAccessing the ProtectTools Security ManagerTo access the ProtectTools Security Manager from the Microsoft® Windows® Con

5–16 Reference GuideCredential Manager for ProtectToolsRegistering a New ApplicationCredential Manager prompts you to register any application that yo

Credential Manager for ProtectToolsReference Guide 5–176. Click and drag the icon from the wizard page over the area of the application where the pass

5–18 Reference GuideCredential Manager for ProtectToolsRemoving Applications from Single Sign OnTo remove applications from Single Sign On:1. Select S

Credential Manager for ProtectToolsReference Guide 5–19Importing ApplicationsTo import an application:1. Select Start > All Programs > HP Protec

5–20 Reference GuideCredential Manager for ProtectToolsAdvanced Tasks (Administrator Only)The “Authentication and Credentials” page and the “Advanced

Credential Manager for ProtectToolsReference Guide 5–21Configuring Custom Authentication RequirementsIf the set of authentication credentials you want

5–22 Reference GuideCredential Manager for ProtectToolsConfiguring Credential PropertiesFrom the Credentials tab of the “Authentication and Credential

Credential Manager for ProtectToolsReference Guide 5–23Configuring Credential Manager SettingsFrom the “Advanced Settings” page, you can access and mo

5–24 Reference GuideCredential Manager for ProtectToolsExample 1—Using the “Advanced Settings” Page to Allow Windows Logon from Credential ManagerTo e

Reference Guide Glossary–1GlossaryThe following terms are used in this document and throughout the ProtectTools Security Manager.Authentication—Proces

IntroductionReference Guide 1–3Understanding Security RolesIn managing computer security (particularly for large organizations), one important practic

Glossary–2 Reference GuideGlossaryCryptography—Practice of encrypting and decrypting data so that it can be decoded only by specific individuals.Decry

GlossaryReference Guide Glossary–3Network account—Windows user or administrator account, either on a local computer, in a workgroup, or on a domain.Pe

Glossary–4 Reference GuideGlossaryUSB token—Security device that stores identifying information about a user. Like a smart card or biometric reader, i

Reference Guide Index–1IndexAaccountbasic user 3–4Credential Manager 5–4Automatic DriveLock 4–6Bbackupembedded security 3–8identity 5–9single sign on

Index–2 Reference GuideIndexdisablingAutomatic DriveLock 4–6device options 4–3embedded security 3–11power-on authentication 4–4smart card authenticati

IndexReference Guide Index–3power-on authenticationenabling and disabling 4–4on Windows restart 4–15power-on passworddefinition 1–4setting and changin

Index–4 Reference GuideIndexTTPM chipenabling 3–2initializing 3–3Vvirtual token 5–7WWindows logon password 1–7Windows network account 5–13

1–4 Reference GuideIntroductionManaging ProtectTools PasswordsMost of the ProtectTools Security Manager features are secured by passwords. The followi