ProtectTools (Select Models Only) - Windows Vista
Page 3
...HP ProtectTools Security Manager 2 Understanding security roles ...2 Managing HP ProtectTools passwords 3 Creating a secure password 5 2 Smart Card Security for HP ProtectTools Initializing the smart card ...7 Smart card BIOS security mode ...8 Enabling smart card BIOS security mode and setting the smart card administrator password ...9 Disabling smart card BIOS... the smart card user password 11 Storing the administrator or user card password 12 General tasks ...13 Updating BIOS smart card settings 13 Selecting the smart card reader 13 Changing the smart card PIN 13 Backing up and...
...HP ProtectTools Security Manager 2 Understanding security roles ...2 Managing HP ProtectTools passwords 3 Creating a secure password 5 2 Smart Card Security for HP ProtectTools Initializing the smart card ...7 Smart card BIOS security mode ...8 Enabling smart card BIOS security mode and setting the smart card administrator password ...9 Disabling smart card BIOS... the smart card user password 11 Storing the administrator or user card password 12 General tasks ...13 Updating BIOS smart card settings 13 Selecting the smart card reader 13 Changing the smart card PIN 13 Backing up and...
ProtectTools (Select Models Only) - Windows Vista
Page 4
...disabling Embedded Security 32 Enabling Embedded Security after permanent disable 32 Migrating keys with the Migration Wizard 33 5 BIOS Configuration for HP ProtectTools General tasks ...35 Managing boot options ...35 Enabling and disabling system configuration options 36 Advanced tasks ...38 Managing...options 42 Enabling and disabling stringent security 42 Enabling and disabling power-on authentication on Windows restart 42 6 Credential Manager for HP ProtectTools Setup procedures ...45 Logging on to Credential Manger 45 Using the Credential Manager Logon Wizard 45 Logging on for the ...
...disabling Embedded Security 32 Enabling Embedded Security after permanent disable 32 Migrating keys with the Migration Wizard 33 5 BIOS Configuration for HP ProtectTools General tasks ...35 Managing boot options ...35 Enabling and disabling system configuration options 36 Advanced tasks ...38 Managing...options 42 Enabling and disabling stringent security 42 Enabling and disabling power-on authentication on Windows restart 42 6 Credential Manager for HP ProtectTools Setup procedures ...45 Logging on to Credential Manger 45 Using the Credential Manager Logon Wizard 45 Logging on for the ...
ProtectTools (Select Models Only) - Windows Vista
Page 7
... software modules: ● Smart Card Security for HP ProtectTools ● Java Card Security for HP ProtectTools ● Embedded Security for HP ProtectTools ● BIOS Configuration for HP ProtectTools ● Credential Manager for HP ProtectTools ● Device Access Manager for HP ProtectTools The software modules available for download from the HP Web site. NOTE The instructions in this guide...
... software modules: ● Smart Card Security for HP ProtectTools ● Java Card Security for HP ProtectTools ● Embedded Security for HP ProtectTools ● BIOS Configuration for HP ProtectTools ● Credential Manager for HP ProtectTools ● Device Access Manager for HP ProtectTools The software modules available for download from the HP Web site. NOTE The instructions in this guide...
ProtectTools (Select Models Only) - Windows Vista
Page 8
...one important practice is to Credential Manager directly from the Windows® Control Panel: ▲ Select Start > All Programs > HP ProtectTools Security Manager. Can also enable and disable some features. Understanding security roles In managing computer security (particularly for the company...to Windows with Credential Manager," in cooperation with HP. For HP ProtectTools, the security duties and privileges can enable smart card BIOS security mode. ● User-Uses the security features. For more information, visit http://www.hp.com. ● IT administrator-Applies and ...
...one important practice is to Credential Manager directly from the Windows® Control Panel: ▲ Select Start > All Programs > HP ProtectTools Security Manager. Can also enable and disable some features. Understanding security roles In managing computer security (particularly for the company...to Windows with Credential Manager," in cooperation with HP. For HP ProtectTools, the security duties and privileges can enable smart card BIOS security mode. ● User-Uses the security features. For more information, visit http://www.hp.com. ● IT administrator-Applies and ...
ProtectTools (Select Models Only) - Windows Vista
Page 9
...BIOS) authentication. HP ProtectTools password Set in this HP ProtectTools Function module Computer Setup setup password NOTE Also known as BIOS administrator, f10 Setup, or Security Setup password BIOS Configuration, by regular users or administrators. ENWW Managing HP ProtectTools passwords 3 The passwords that contains the BIOS... or restored from hibernation. When used passwords, the software module where the password is turned on password BIOS Configuration Protects access to the computer contents when the computer is set by IT administrator Protects access to ...
...BIOS) authentication. HP ProtectTools password Set in this HP ProtectTools Function module Computer Setup setup password NOTE Also known as BIOS administrator, f10 Setup, or Security Setup password BIOS Configuration, by regular users or administrators. ENWW Managing HP ProtectTools passwords 3 The passwords that contains the BIOS... or restored from hibernation. When used passwords, the software module where the password is turned on password BIOS Configuration Protects access to the computer contents when the computer is set by IT administrator Protects access to ...
ProtectTools (Select Models Only) - Windows Vista
Page 12
... modules, such as Credential Manager for HP ProtectTools. ● Work with the Computer Setup utility to enable smart card authentication in a power-on environment, and to authenticate users of the smart card. ● Back up and restore smart card BIOS passwords stored on the smart card. 6... Chapter 2 Smart Card Security for computers equipped with an optional smart card reader. 2 Smart Card Security for HP ProtectTools Smart Card Security for HP ProtectTools manages the smart card setup and configuration ...
... modules, such as Credential Manager for HP ProtectTools. ● Work with the Computer Setup utility to enable smart card authentication in a power-on environment, and to authenticate users of the smart card. ● Back up and restore smart card BIOS passwords stored on the smart card. 6... Chapter 2 Smart Card Security for computers equipped with an optional smart card reader. 2 Smart Card Security for HP ProtectTools Smart Card Security for HP ProtectTools manages the smart card setup and configuration ...
ProtectTools (Select Models Only) - Windows Vista
Page 14
...user smart cards. ● Create a recovery file to restore either a user or administrator smart card. 8 Chapter 2 Smart Card Security for HP ProtectTools ENWW The smart card administrator password links the smart card to the computer for identification purposes, and also allows you to do the following... computer. Set the smart card administrator password. The process of enabling smart card BIOS security mode involves the following : ● Access Computer Setup or the contents of enabling smart card BIOS security mode. Refer to "Enabling and disabling smart card or Java Card power-...
...user smart cards. ● Create a recovery file to restore either a user or administrator smart card. 8 Chapter 2 Smart Card Security for HP ProtectTools ENWW The smart card administrator password links the smart card to the computer for identification purposes, and also allows you to do the following... computer. Set the smart card administrator password. The process of enabling smart card BIOS security mode involves the following : ● Access Computer Setup or the contents of enabling smart card BIOS security mode. Refer to "Enabling and disabling smart card or Java Card power-...
ProtectTools (Select Models Only) - Windows Vista
Page 15
... mode and setting the smart card administrator password To enable smart card BIOS security mode and set the smart card administrator password: 1. Select Start > All Programs > HP ProtectTools Security Manager. 2. To disable smart card security: 1. Insert the card containing the current smart card ...no longer needed to access the computer. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, click Smart Card Security, and then click BIOS. 3. In the right pane, under BIOS Security Mode, click Disable. 4. Insert the new administrator smart card, ...
... mode and setting the smart card administrator password To enable smart card BIOS security mode and set the smart card administrator password: 1. Select Start > All Programs > HP ProtectTools Security Manager. 2. To disable smart card security: 1. Insert the card containing the current smart card ...no longer needed to access the computer. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, click Smart Card Security, and then click BIOS. 3. In the right pane, under BIOS Security Mode, click Disable. 4. Insert the new administrator smart card, ...
ProtectTools (Select Models Only) - Windows Vista
Page 16
...Mode, next to "Smart card BIOS security mode," earlier in Computer Setup. Enter the smart card PIN and click Next. 5. Refer to BIOS administrator card, click Change. 4. Insert the new administrator card and click Next. 6. Select Start > All Programs > HP ProtectTools Security Manager. 2. In ...the left pane, click Smart Card Security, and then click BIOS. 3. To change the smart card ...
...Mode, next to "Smart card BIOS security mode," earlier in Computer Setup. Enter the smart card PIN and click Next. 5. Refer to BIOS administrator card, click Change. 4. Insert the new administrator card and click Next. 6. Select Start > All Programs > HP ProtectTools Security Manager. 2. In ...the left pane, click Smart Card Security, and then click BIOS. 3. To change the smart card ...
ProtectTools (Select Models Only) - Windows Vista
Page 17
...PIN and click OK. Generating a random password offers more information, refer to be entered at startup, clear this chapter. 9. ENWW Smart card BIOS security mode 11 Enter the smart card PIN and click Next. 5. NOTE Using a known password enables you create a recovery file. NOTE ... It is already a user password in the Finish dialog box, and then click Finish. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the BIOS Password Wizard, you require the smart card PIN to create duplicate cards without using a recovery file. Setting and changing the smart...
...PIN and click OK. Generating a random password offers more information, refer to be entered at startup, clear this chapter. 9. ENWW Smart card BIOS security mode 11 Enter the smart card PIN and click Next. 5. NOTE Using a known password enables you create a recovery file. NOTE ... It is already a user password in the Finish dialog box, and then click Finish. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the BIOS Password Wizard, you require the smart card PIN to create duplicate cards without using a recovery file. Setting and changing the smart...
ProtectTools (Select Models Only) - Windows Vista
Page 18
... will not be entered at startup. however, you must have already set the administrator password, you can either Administrator or User for HP ProtectTools ENWW Under Boot Requirements, select the check box if you require that you create a smart card recovery file. Enter the smart...● Enter a password manually. ● Generate a random 32-byte password. In the left pane, click Smart Card Security, and then click BIOS. 4. The system prompts you to create duplicate cards without using a recovery file. To store the administrator or user card password: 1. CAUTION This procedure...
... will not be entered at startup. however, you must have already set the administrator password, you can either Administrator or User for HP ProtectTools ENWW Under Boot Requirements, select the check box if you require that you create a smart card recovery file. Enter the smart...● Enter a password manually. ● Generate a random 32-byte password. In the left pane, click Smart Card Security, and then click BIOS. 4. The system prompts you to create duplicate cards without using a recovery file. To store the administrator or user card password: 1. CAUTION This procedure...
ProtectTools (Select Models Only) - Windows Vista
Page 19
...select the check box to require a PIN at reboot. To select the smart card reader: 1. In the right pane, under Smart Card BIOS Password Properties, click Settings. 4. The reader information is selected in Smart Card Security before using the smart card. Type your current smart ... under Change PIN, click Change PIN. 4. Select Start > All Programs > HP ProtectTools Security Manager. 2. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, click Smart Card Security, and then click BIOS. 3. Enter the smart card PIN and click OK. In the left pane,...
...select the check box to require a PIN at reboot. To select the smart card reader: 1. In the right pane, under Smart Card BIOS Password Properties, click Settings. 4. The reader information is selected in Smart Card Security before using the smart card. Type your current smart ... under Change PIN, click Change PIN. 4. Select Start > All Programs > HP ProtectTools Security Manager. 2. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, click Smart Card Security, and then click BIOS. 3. Enter the smart card PIN and click OK. In the left pane,...
ProtectTools (Select Models Only) - Windows Vista
Page 26
...Card power-on authentication support in Java Card Security. Select Start > All Programs > HP ProtectTools Security Manager. 2. Setting power-on authentication When enabled, power-on authentication support," in Chapter 5, "BIOS Configuration for the Java Card in the Name box. 7. The process of enabling Java... a Java Card You must assign a name to a Java Card before it can be used for HP ProtectTools ENWW To assign a name to "Enabling Java Card power-on authentication in BIOS Configuration or Computer Setup. Refer to a Java Card: 1. Create and enable the administrator Java Card....
...Card power-on authentication support in Java Card Security. Select Start > All Programs > HP ProtectTools Security Manager. 2. Setting power-on authentication When enabled, power-on authentication support," in Chapter 5, "BIOS Configuration for the Java Card in the Name box. 7. The process of enabling Java... a Java Card You must assign a name to a Java Card before it can be used for HP ProtectTools ENWW To assign a name to "Enabling Java Card power-on authentication in BIOS Configuration or Computer Setup. Refer to a Java Card: 1. Create and enable the administrator Java Card....
ProtectTools (Select Models Only) - Windows Vista
Page 31
... 25 On select models, the TPM embedded security chip also enables enhanced BIOS security features accessed through BIOS Configuration for protected digital certificate operations when using the Embedded Security software The TPM embedded security chip enhances and enables other HP ProtectTools Security Manager security features. This software module provides the following security features...
... 25 On select models, the TPM embedded security chip also enables enhanced BIOS security features accessed through BIOS Configuration for protected digital certificate operations when using the Embedded Security software The TPM embedded security chip enhances and enables other HP ProtectTools Security Manager security features. This software module provides the following security features...
ProtectTools (Select Models Only) - Windows Vista
Page 32
Enabling the embedded security chip The embedded security chip must be performed in BIOS Configuration for HP ProtectTools ENWW This procedure cannot be enabled in the Computer Setup utility. Type your preferences and exit Computer Setup, use the arrow keys to Enable.... 7. Open Computer Setup by turning on -screen instructions. 26 Chapter 4 Embedded Security for HP ProtectTools. If you have not set an administrator password, use the arrow keys to the Embedded Security configuration. 8. Press f10 to accept the changes to...
Enabling the embedded security chip The embedded security chip must be performed in BIOS Configuration for HP ProtectTools ENWW This procedure cannot be enabled in the Computer Setup utility. Type your preferences and exit Computer Setup, use the arrow keys to Enable.... 7. Open Computer Setup by turning on -screen instructions. 26 Chapter 4 Embedded Security for HP ProtectTools. If you have not set an administrator password, use the arrow keys to the Embedded Security configuration. 8. Press f10 to accept the changes to...
ProtectTools (Select Models Only) - Windows Vista
Page 40
This gives users Windows access to the Computer Setup utility security and configuration settings. With BIOS Configuration, you can ● Manage power-on passwords and administrator passwords. ● Configure other power-on authentication features, such ... ● Configure boot options, which includes enabling MultiBoot and changing the boot order. NOTE Many of the features in BIOS Configuration for HP ProtectTools are also available in Computer Setup. 34 Chapter 5 BIOS Configuration for HP ProtectTools provides access to system security features that are managed by Computer Setup...
This gives users Windows access to the Computer Setup utility security and configuration settings. With BIOS Configuration, you can ● Manage power-on passwords and administrator passwords. ● Configure other power-on authentication features, such ... ● Configure boot options, which includes enabling MultiBoot and changing the boot order. NOTE Many of the features in BIOS Configuration for HP ProtectTools are also available in Computer Setup. 34 Chapter 5 BIOS Configuration for HP ProtectTools provides access to system security features that are managed by Computer Setup...
ProtectTools (Select Models Only) - Windows Vista
Page 41
Managing boot options You can use BIOS Configuration to manage various settings for Express Boot Popup Delay (Sec). 6. For more information about setting the Computer Setup setup password, refer to "Setting the setup password," later in the HP ProtectTools window to save your Computer ... at startup and entering Computer Setup. ENWW General tasks 35 Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, click System Configuration. 5. NOTE The BIOS administrator password prompt is displayed only if you turn on or restart the computer. Click Apply,...
Managing boot options You can use BIOS Configuration to manage various settings for Express Boot Popup Delay (Sec). 6. For more information about setting the Computer Setup setup password, refer to "Setting the setup password," later in the HP ProtectTools window to save your Computer ... at startup and entering Computer Setup. ENWW General tasks 35 Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, click System Configuration. 5. NOTE The BIOS administrator password prompt is displayed only if you turn on or restart the computer. Click Apply,...
ProtectTools (Select Models Only) - Windows Vista
Page 42
...by your Computer Setup administrator password at Boot ● Swapping fn/Ctrl Keys ● Multiple Pointing Devices ● USB Legacy Support 36 Chapter 5 BIOS Configuration for HP ProtectTools ENWW In the left pane, click System Configuration, and then enable or disable a system configuration option, or configure a system configuration option in ...; Internal Network Adapter Boot ● Internal Network Adapter Boot Mode (PXE or RPL) ● Boot Order ● Device Configurations ● NumLock at the BIOS administrator password prompt, and then click OK. 4. In the left pane, click...
...by your Computer Setup administrator password at Boot ● Swapping fn/Ctrl Keys ● Multiple Pointing Devices ● USB Legacy Support 36 Chapter 5 BIOS Configuration for HP ProtectTools ENWW In the left pane, click System Configuration, and then enable or disable a system configuration option, or configure a system configuration option in ...; Internal Network Adapter Boot ● Internal Network Adapter Boot Mode (PXE or RPL) ● Boot Order ● Device Configurations ● NumLock at the BIOS administrator password prompt, and then click OK. 4. In the left pane, click...
ProtectTools (Select Models Only) - Windows Vista
Page 43
Click Apply, and then click OK in the HP ProtectTools window to save your changes and exit. ENWW General tasks 37 ● Parallel port mode (standard, bidirectional, EPP, or ECP) ● Data Execution Prevention ...9679; SATA Native Mode ● Dual Core CPU ● Automatic Intel® SpeedStep Functionality Support ● Fan Always on While on AC Power ● BIOS DMA Data Transfers ● Intel or AMD PSAE Execution Disable ● Built-In Device Options ● Embedded WLAN Device Radio ● Embedded WWAN Device Radio...
Click Apply, and then click OK in the HP ProtectTools window to save your changes and exit. ENWW General tasks 37 ● Parallel port mode (standard, bidirectional, EPP, or ECP) ● Data Execution Prevention ...9679; SATA Native Mode ● Dual Core CPU ● Automatic Intel® SpeedStep Functionality Support ● Fan Always on While on AC Power ● BIOS DMA Data Transfers ● Intel or AMD PSAE Execution Disable ● Built-In Device Options ● Embedded WLAN Device Radio ● Embedded WWAN Device Radio...
ProtectTools (Select Models Only) - Windows Vista
Page 44
... Apply, and then click OK in BIOS Configuration. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, click Security. 5. To enable smart card power-on the computer. Under Smart Card Security, click Enable. Advanced tasks Managing HP ProtectTools settings Some of the features of HP ProtectTools Security Manager can be managed...
... Apply, and then click OK in BIOS Configuration. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, click Security. 5. To enable smart card power-on the computer. Under Smart Card Security, click Enable. Advanced tasks Managing HP ProtectTools settings Some of the features of HP ProtectTools Security Manager can be managed...