HP EliteBook Folio 9470m Notebook PC (ENERGY STAR) User Manual Page 5

  • Download
  • Add to my manuals
  • Print
  • Page
    / 9
  • Table of contents
  • BOOKMARKS
  • Rated. / 5. Based on customer reviews
Page view 4
5
To set up the fingerprint reader, review the ProtectTools user guide at
http://h10032.www1.hp.com/ctg/Manual/c02292692.pdf.
Use HP ProtectTools Administrative Console to modify the logon policy, credential requirements, or other management
settings that have been configured in the Security Manager setup wizard.
Authentication if the system has both BIOS and ProtectTools users
If there are both BIOS users and ProtectTools users within BIOS, and preboot security is enabled within ProtectTools, the
BIOS will prompt with a list of all current BIOS users and ProtectTools users. If a BIOS user is selected from the list, the
BIOS authenticates the user with the appropriate BIOS user password, and the user must log in again to Windows. If a
ProtectTools user is selected from the list, the BIOS authenticates the user according to the policy set within
ProtectTools, enabling the user to log in all the way to Windows.
Forgotten passwords
Forgotten passwords can be recovered by all categories of users: BIOS User, BIOS Administrator, and ProtectTools User.
BIOS user
Two possibilities apply for a BIOS user who forgets the password:
If the BIOS user has set up HP SpareKey but fails to enter the correct password, the system opens a HP SpareKey
Recovery screen. The user can answer the HP SpareKey questions to create a new password and regain access to the
system. A BIOS user can set up HP SpareKey within the f10 BIOS setup.
A BIOS administrator can go to the f10 BIOS setup to remove and re-add the BIOS user, effectively supplying the user
with a new password.
BIOS administrator
A BIOS administrator who forgets the administrator password and has set up HP SpareKey can use the HP SpareKey to
boot the system.
If the BIOS administrator has not set up HP SpareKey, HP Services can reset the system to factory default (for 2009 and
newer commercial notebook platforms).
ProtectTools user
If a ProtectTools user forgets the password and there is a BIOS administrator, the BIOS administrator can use the
administrator password at the BIOS authentication screen. However, the user will have to authenticate again at the next
security domain, either Drive Encryption or Windows.
If the ProtectTools user forgets the Windows password and has set up HP SpareKey, he can use the HP SpareKey to boot
the system.
If the ProtectTools user forgets the password, has not set up HP SpareKey, and there is no BIOS administrator, the
ProtectTools user can enter f10 as Guest User, define a new BIOS administrator, and remove the ProtectTools user
account. Or, as an alternative, HP Services can reset the system to factory default.
Protecting local storage
Without local storage protection, it is possible to bypass strong user authentication by removing an unprotected hard
drive from a secure system and inserting it into an unsecure system. This allows virtually all data to become accessible.
HP business notebooks include a hard drive security feature called DriveLock or Automatic DriveLock (for multiuser
systems) that locks the hard drive with a password.
Another security threat often not considered is the vulnerability of information that is left on a hard drive when a system
is recycled or disposed of. Large enterprises tend to use external services that wipe hard drives before they are disposed
of, but many customers have no such processes or solutions in place. To counter this threat, HP includes Disk Sanitizer
(for hard disk drives) and Secure Erase (for solid-state drives and hard disk drives that support it) as a standard BIOS
feature in all HP business notebooks. HP added Secure Erase to the standard BIOS in Q3 2011, and systems sold in 2009
or later can upgrade their BIOS to include the capability.
Page view 4
1 2 3 4 5 6 7 8 9

Comments to this Manuals

No comments