Summary of the content on the page No. 1
HP ProtectTools Security Software,
Version 6.0
User Guide
Summary of the content on the page No. 2
© Copyright 2009, 2010 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice. Microsoft, Windows and Windows Vista are either trademarks or registered trademarks of Microsoft Corporation in the United States and/or other countries. The only warranties for HP products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warrant
Summary of the content on the page No. 3
About This Book This guide provides basic information for upgrading this computer model. WARNING! Text set off in this manner indicates that failure to follow directions could result in bodily harm or loss of life. CAUTION: Text set off in this manner indicates that failure to follow directions could result in damage to equipment or loss of information. NOTE: Text set off in this manner provides important supplemental information. ENWW iii
Summary of the content on the page No. 4
iv About This Book ENWW
Summary of the content on the page No. 5
Table of contents 1 Introduction to security .................................................................................................................................. 1 HP ProtectTools features ..................................................................................................................... 2 HP ProtectTools security products description and common use examples ........................................ 3 Credential Manager (Password Manager) for HP ProtectTools .....
Summary of the content on the page No. 6
Specifying device settings ................................................................................................. 16 Configuring Applications Settings ....................................................................................................... 16 Encrypting Drives ............................................................................................................................... 17 Managing Device Access ...........................................................
Summary of the content on the page No. 7
Logging in after Drive Encryption is activated .................................................................... 30 Advanced tasks .................................................................................................................................. 30 Managing Drive Encryption (administrator task) ................................................................ 30 Activating a TPM-protected password .............................................................. 30 Encrypting or d
Summary of the content on the page No. 8
Setting a shred schedule ................................................................................................... 44 Selecting or creating a shred profile .................................................................................. 44 Selecting a predefined shred profile .................................................................................. 44 Customizing an advanced security shred profile ............................................................... 45 Customizing
Summary of the content on the page No. 9
Creating an extendable JITA for a user or group ............................................................... 55 Disabling a JITA for a user or group .................................................................................. 56 Advanced Settings ............................................................................................................................. 56 10 Computrace for HP ProtectTools ................................................................................
Summary of the content on the page No. 10
x ENWW
Summary of the content on the page No. 11
1 Introduction to security HP ProtectTools security software provides security features that help protect against unauthorized access to the computer, networks, and critical data. Enhanced security functionality is provided by several HP ProtectTools software modules. HP ProtectTools provides two versions that can be utilized: HP ProtectTools Security Manager Administrative Console and HP ProtectTools Security Manager (for general users). Both Administrator and user versions are available in the
Summary of the content on the page No. 12
HP ProtectTools features The following table details the key features of HP ProtectTools modules: Module Key features HP ProtectTools Security Manager Administrative ● The Security Manager setup wizard is used by administrators to Console set up and configure levels of security and security logon methods. ● Configure options hidden from basic users. ● Activate Drive Encryption and configure user access. ● Configure Device Access Manager configurations and user access. ● Administrator tools are u
Summary of the content on the page No. 13
Module Key features Smart Card Security (part of Security Manager) ● Provides a management software interface for Smart Card. HP ProtectTools Smart Card is a personal security device that protects authentication data requiring both the card and a PIN number to grant access. The Smart Card can be used to access Password Manager, Drive Encryption, or any number of third party access points. ● Change PIN number. Embedded Security for HP ProtectTools ● Uses a Trusted Platform Module (TPM) embedded s
Summary of the content on the page No. 14
Example 1: A Purchasing Agent for a large manufacturer makes most of her corporate transactions over the Internet. She also frequently visits several popular web sites that require login information. She is keenly aware of security so does not use the same password on every account. The Purchasing Agent has decided to use Credential Manager to match web links with different user names and passwords. When she goes to a web site to log in, Credential Manager presents the credentials automatically.
Summary of the content on the page No. 15
Both Embedded Security and Drive Encryption for HP ProtectTools will not allow access to the encrypted data even when the drive is removed because they are both bound to the original motherboard. Example 2: A Hospital Administrator wants to ensure only doctors and authorized personnel can access any data on their local computer without sharing their personal passwords. The IT department adds the Administrator, doctors, and all authorized personnel as Drive Encryption users. Now only authorized p
Summary of the content on the page No. 16
Example 1: A Stock Broker wants to make sure his e-mails only go to specific clients and ensure no one can fake the e-mail account and intercept it. The Stock Broker signs himself and his clients up with Privacy Manager. Privacy Manager issues them a Certificate of Authentication (CA) to each user. Using this tool, the Stock Broker and his clients must authenticate before the e-mail is exchanged. Privacy Manager for HP ProtectTools makes it easy to send and receive e-mail where the recipient has
Summary of the content on the page No. 17
● Creating strong password policies ● Addressing regulatory security mandates Protecting against targeted theft An example of this type of incident would be the targeted theft of a computer or its confidential data and customer information. This can easily occur in open office environments or in unsecured areas. The following features help protect the data if the computer is stolen: ● The pre-boot authentication feature, if enabled, helps prevent access to the operating system. See the following
Summary of the content on the page No. 18
Preventing unauthorized access from internal or external locations Unauthorized access to an unsecured business PC presents a very tangible risk to critical data such as information from financial services, an executive, or R&D team, and to private information such as patient records or personal financial records. The following features help prevent unauthorized access: ● The pre-boot authentication feature, if enabled, helps prevent access to the operating system. See the following chapters: ◦
Summary of the content on the page No. 19
Additional security elements Assigning security roles In managing computer security, one important practice is to divide responsibilities and rights among various types of administrators and users. NOTE: In a small organization or for individual use, these roles may all be held by the same person. For HP ProtectTools, the security duties and privileges can be divided into the following roles: ● Security officer—Defines the security level for the company or network and determines the security fea
Summary of the content on the page No. 20
HP ProtectTools password Set in this Function HP ProtectTools module Smart Card PIN Smart Card Security Can be used as a multifactor authentication option. Can be used as a Windows authentication. Authenticates users of Drive Encryption, if the Smart Card token is selected. Computer Setup password BIOS, by IT administrator Protects access to the Computer Setup utility. NOTE: Also known as BIOS administrator, F10 Setup, or Security Setup password Power-on password BIOS Protects access to the comp
