ProtectTools (Select Models Only) - Windows Vista
Page 3
...HP ProtectTools Security Manager 2 Understanding security roles ...2 Managing HP ProtectTools passwords 3 Creating a secure password 5 2 Smart Card Security for HP ProtectTools Initializing the smart card ...7 Smart card BIOS security mode ...8 Enabling smart card BIOS security mode and setting the smart card administrator password ...9 Disabling smart card BIOS... the smart card user password 11 Storing the administrator or user card password 12 General tasks ...13 Updating BIOS smart card settings 13 Selecting the smart card reader 13 Changing the smart card PIN 13 Backing up and...
...HP ProtectTools Security Manager 2 Understanding security roles ...2 Managing HP ProtectTools passwords 3 Creating a secure password 5 2 Smart Card Security for HP ProtectTools Initializing the smart card ...7 Smart card BIOS security mode ...8 Enabling smart card BIOS security mode and setting the smart card administrator password ...9 Disabling smart card BIOS... the smart card user password 11 Storing the administrator or user card password 12 General tasks ...13 Updating BIOS smart card settings 13 Selecting the smart card reader 13 Changing the smart card PIN 13 Backing up and...
ProtectTools (Select Models Only) - Windows Vista
Page 4
...disabling Embedded Security 32 Enabling Embedded Security after permanent disable 32 Migrating keys with the Migration Wizard 33 5 BIOS Configuration for HP ProtectTools General tasks ...35 Managing boot options ...35 Enabling and disabling system configuration options 36 Advanced tasks ...38 Managing...options 42 Enabling and disabling stringent security 42 Enabling and disabling power-on authentication on Windows restart 42 6 Credential Manager for HP ProtectTools Setup procedures ...45 Logging on to Credential Manger 45 Using the Credential Manager Logon Wizard 45 Logging on for the ...
...disabling Embedded Security 32 Enabling Embedded Security after permanent disable 32 Migrating keys with the Migration Wizard 33 5 BIOS Configuration for HP ProtectTools General tasks ...35 Managing boot options ...35 Enabling and disabling system configuration options 36 Advanced tasks ...38 Managing...options 42 Enabling and disabling stringent security 42 Enabling and disabling power-on authentication on Windows restart 42 6 Credential Manager for HP ProtectTools Setup procedures ...45 Logging on to Credential Manger 45 Using the Credential Manager Logon Wizard 45 Logging on for the ...
ProtectTools (Select Models Only) - Windows Vista
Page 7
... is provided by the following software modules: ● Smart Card Security for HP ProtectTools ● Java Card Security for HP ProtectTools ● Embedded Security for HP ProtectTools ● BIOS Configuration for HP ProtectTools ● Credential Manager for HP ProtectTools ● Device Access Manager for HP ProtectTools The software modules available for your computer may be installed on...
... is provided by the following software modules: ● Smart Card Security for HP ProtectTools ● Java Card Security for HP ProtectTools ● Embedded Security for HP ProtectTools ● BIOS Configuration for HP ProtectTools ● Credential Manager for HP ProtectTools ● Device Access Manager for HP ProtectTools The software modules available for your computer may be installed on...
ProtectTools (Select Models Only) - Windows Vista
Page 8
... defined by logging on to Credential Manager directly from the Windows® Control Panel: ▲ Select Start > All Programs > HP ProtectTools Security Manager. For example, if the security officer and IT administrator have configured the Credential Manager module, you can be customized... by the same person. NOTE In a small organization or for individual use the card for HP ProtectTools." For HP ProtectTools, the security duties and privileges can enable smart card BIOS security mode. ● User-Uses the security features. Can also enable and disable some features...
... defined by logging on to Credential Manager directly from the Windows® Control Panel: ▲ Select Start > All Programs > HP ProtectTools Security Manager. For example, if the security officer and IT administrator have configured the Credential Manager module, you can be customized... by the same person. NOTE In a small organization or for individual use the card for HP ProtectTools." For HP ProtectTools, the security duties and privileges can enable smart card BIOS security mode. ● User-Uses the security features. Can also enable and disable some features...
ProtectTools (Select Models Only) - Windows Vista
Page 9
... access to the computer contents when the computer is turned on , restarted, or restored from hibernation. ENWW Managing HP ProtectTools passwords 3 Allows access to the computer contents. It also allows for power-on (BIOS) authentication. Smart card PIN Smart Card Security Smart card recovery file password Java™ Card PIN Smart Card...
... access to the computer contents when the computer is turned on , restarted, or restored from hibernation. ENWW Managing HP ProtectTools passwords 3 Allows access to the computer contents. It also allows for power-on (BIOS) authentication. Smart card PIN Smart Card Security Smart card recovery file password Java™ Card PIN Smart Card...
ProtectTools (Select Models Only) - Windows Vista
Page 12
...Initialize a smart card so that it can be used to authenticate users of the smart card. ● Back up and restore smart card BIOS passwords stored on environment, and to configure separate smart cards for an administrator and a user. This requires a user to insert the smart...● Set and change the password used with other HP ProtectTools modules, such as Credential Manager for HP ProtectTools. ● Work with an optional smart card reader. 2 Smart Card Security for HP ProtectTools Smart Card Security for HP ProtectTools manages the smart card setup and configuration for computers...
...Initialize a smart card so that it can be used to authenticate users of the smart card. ● Back up and restore smart card BIOS passwords stored on environment, and to configure separate smart cards for an administrator and a user. This requires a user to insert the smart...● Set and change the password used with other HP ProtectTools modules, such as Credential Manager for HP ProtectTools. ● Work with an optional smart card reader. 2 Smart Card Security for HP ProtectTools Smart Card Security for HP ProtectTools manages the smart card setup and configuration for computers...
ProtectTools (Select Models Only) - Windows Vista
Page 14
... Setup setup password. NOTE The smart card administrator password is not the same as part of the process of enabling smart card BIOS security mode involves the following : ● Access Computer Setup or the contents of the computer when the computer is turned on...administrator and user smart cards. ● Create a recovery file to use a smart card for HP ProtectTools ENWW Set the smart card administrator password. NOTE Enabling this chapter. 3. The smart card BIOS security mode features are unavailable until you to restore either a user or administrator smart card. 8 ...
... Setup setup password. NOTE The smart card administrator password is not the same as part of the process of enabling smart card BIOS security mode involves the following : ● Access Computer Setup or the contents of the computer when the computer is turned on...administrator and user smart cards. ● Create a recovery file to use a smart card for HP ProtectTools ENWW Set the smart card administrator password. NOTE Enabling this chapter. 3. The smart card BIOS security mode features are unavailable until you to restore either a user or administrator smart card. 8 ...
ProtectTools (Select Models Only) - Windows Vista
Page 15
...card security: 1. In the left pane, click Smart Card Security, and then click BIOS. 3. In the right pane, under BIOS Security Mode, click Disable. 4. Select Start > All Programs > HP ProtectTools Security Manager. 2. Insert the card containing the current smart card administrator password, ... ● Creating a recovery file. Select Start > All Programs > HP ProtectTools Security Manager. 2. Enabling smart card BIOS security mode and setting the smart card administrator password To enable smart card BIOS security mode and set the smart card administrator password: 1. ENWW Smart card...
...card security: 1. In the left pane, click Smart Card Security, and then click BIOS. 3. In the right pane, under BIOS Security Mode, click Disable. 4. Select Start > All Programs > HP ProtectTools Security Manager. 2. Insert the card containing the current smart card administrator password, ... ● Creating a recovery file. Select Start > All Programs > HP ProtectTools Security Manager. 2. Enabling smart card BIOS security mode and setting the smart card administrator password To enable smart card BIOS security mode and set the smart card administrator password: 1. ENWW Smart card...
ProtectTools (Select Models Only) - Windows Vista
Page 16
... more information about the smart card administrator password. In the right pane, under BIOS Security Mode, next to "Smart card BIOS security mode," earlier in Computer Setup. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, click Smart Card Security, and... then click BIOS. 3. NOTE The following procedure updates the smart card administrator password stored on the card and in this chapter, for HP ProtectTools ENWW Refer to BIOS administrator card, click Change. 4. Changing the smart card ...
... more information about the smart card administrator password. In the right pane, under BIOS Security Mode, next to "Smart card BIOS security mode," earlier in Computer Setup. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, click Smart Card Security, and... then click BIOS. 3. NOTE The following procedure updates the smart card administrator password stored on the card and in this chapter, for HP ProtectTools ENWW Refer to BIOS administrator card, click Change. 4. Changing the smart card ...
ProtectTools (Select Models Only) - Windows Vista
Page 17
... PIN and click OK. NOTE If you require the smart card PIN to be entered at startup, clear this chapter. 9. In the BIOS Password Wizard, you create a recovery file. Under Boot Requirements, select the check box if you do not require the smart card PIN... displayed. Enter the smart card PIN in Computer Setup, click the Change button. 4. Select Start > All Programs > HP ProtectTools Security Manager. 2. For more security; ENWW Smart card BIOS security mode 11 Generating a random password offers more information, refer to step 9. ● If there is no user ...
... PIN and click OK. NOTE If you require the smart card PIN to be entered at startup, clear this chapter. 9. In the BIOS Password Wizard, you create a recovery file. Under Boot Requirements, select the check box if you do not require the smart card PIN... displayed. Enter the smart card PIN in Computer Setup, click the Change button. 4. Select Start > All Programs > HP ProtectTools Security Manager. 2. For more security; ENWW Smart card BIOS security mode 11 Generating a random password offers more information, refer to step 9. ● If there is no user ...
ProtectTools (Select Models Only) - Windows Vista
Page 18
... the reader. 2. however, you must have already set the administrator password, you can either Administrator or User for HP ProtectTools ENWW Select Start > All Programs > HP ProtectTools Security Manager. 3. Storing the administrator or user card password If you want to access the computer with the ...new card. You will not be able to create a backup card and have a recovery file to create a recovery file. In the right pane, under BIOS...
... the reader. 2. however, you must have already set the administrator password, you can either Administrator or User for HP ProtectTools ENWW Select Start > All Programs > HP ProtectTools Security Manager. 3. Storing the administrator or user card password If you want to access the computer with the ...new card. You will not be able to create a backup card and have a recovery file to create a recovery file. In the right pane, under BIOS...
ProtectTools (Select Models Only) - Windows Vista
Page 19
... at reboot. Selecting the smart card reader Ensure that the correct smart card reader is automatically refreshed. In the right pane, under Smart Card BIOS Password Properties, click Settings. 4. NOTE To eliminate this requirement, clear the check box. 5. Enter the smart card PIN and click OK.... Smart Card Security, and then click General. 3. In the right pane, under Change PIN, click Change PIN. 4. Select Start > All Programs > HP ProtectTools Security Manager. 2. Set and confirm the new PIN. 6. In the right pane, under Smart Card Reader, click the correct reader. 4. ENWW General...
... at reboot. Selecting the smart card reader Ensure that the correct smart card reader is automatically refreshed. In the right pane, under Smart Card BIOS Password Properties, click Settings. 4. NOTE To eliminate this requirement, clear the check box. 5. Enter the smart card PIN and click OK.... Smart Card Security, and then click General. 3. In the right pane, under Change PIN, click Change PIN. 4. Select Start > All Programs > HP ProtectTools Security Manager. 2. Set and confirm the new PIN. 6. In the right pane, under Smart Card Reader, click the correct reader. 4. ENWW General...
ProtectTools (Select Models Only) - Windows Vista
Page 26
.... 3. The process of enabling Java Card power-on authentication support in BIOS Configuration or Computer Setup. Enable Java Card power-on authentication involves the following steps: 1. Create and enable the administrator Java Card. 20 Chapter 3 Java Card Security for HP ProtectTools." 2. Assigning a name to a Java Card You must assign ... the Name box. 7. Setting power-on authentication When enabled, power-on authentication and creating an administrator Java Card," later in Chapter 5, "BIOS Configuration for HP ProtectTools ENWW Click OK. Refer to a Java Card: 1.
.... 3. The process of enabling Java Card power-on authentication support in BIOS Configuration or Computer Setup. Enable Java Card power-on authentication involves the following steps: 1. Create and enable the administrator Java Card. 20 Chapter 3 Java Card Security for HP ProtectTools." 2. Assigning a name to a Java Card You must assign ... the Name box. 7. Setting power-on authentication When enabled, power-on authentication and creating an administrator Java Card," later in Chapter 5, "BIOS Configuration for HP ProtectTools ENWW Click OK. Refer to a Java Card: 1.
ProtectTools (Select Models Only) - Windows Vista
Page 31
.... On select models, the TPM embedded security chip also enables enhanced BIOS security features accessed through BIOS Configuration for protected digital certificate operations when using the Embedded Security software The... TPM embedded security chip enhances and enables other HP ProtectTools Security Manager security features. Embedded Security for HP ProtectTools protects against unauthorized access to use the embedded chip as Microsoft® Outlook and Internet Explorer) for HP...
.... On select models, the TPM embedded security chip also enables enhanced BIOS security features accessed through BIOS Configuration for protected digital certificate operations when using the Embedded Security software The... TPM embedded security chip enhances and enables other HP ProtectTools Security Manager security features. Embedded Security for HP ProtectTools protects against unauthorized access to use the embedded chip as Microsoft® Outlook and Internet Explorer) for HP...
ProtectTools (Select Models Only) - Windows Vista
Page 32
.... Press f10 to accept the changes to select Security > Setup password, and then press enter. 3. To save your password in BIOS Configuration for HP ProtectTools ENWW This procedure cannot be enabled in the following 2 sections to select TPM Embedded Security, and then press enter. 5. In...Changes and Exit. To enable the embedded security chip: 1. Open Computer Setup by turning on -screen instructions. 26 Chapter 4 Embedded Security for HP ProtectTools. Then follow the on or restarting the computer, and then pressing f10 while the "f10 = ROM Based Setup" message is displayed ...
.... Press f10 to accept the changes to select Security > Setup password, and then press enter. 3. To save your password in BIOS Configuration for HP ProtectTools ENWW This procedure cannot be enabled in the following 2 sections to select TPM Embedded Security, and then press enter. 5. In...Changes and Exit. To enable the embedded security chip: 1. Open Computer Setup by turning on -screen instructions. 26 Chapter 4 Embedded Security for HP ProtectTools. Then follow the on or restarting the computer, and then pressing f10 while the "f10 = ROM Based Setup" message is displayed ...
ProtectTools (Select Models Only) - Windows Vista
Page 40
... and configuration settings. This gives users Windows access to system security features that are also available in BIOS Configuration for HP ProtectTools are managed by Computer Setup. 5 BIOS Configuration for HP ProtectTools BIOS Configuration for HP ProtectTools ENWW With BIOS Configuration, you can ● Manage power-on passwords and administrator passwords. ● Configure other power-on authentication...
... and configuration settings. This gives users Windows access to system security features that are also available in BIOS Configuration for HP ProtectTools are managed by Computer Setup. 5 BIOS Configuration for HP ProtectTools BIOS Configuration for HP ProtectTools ENWW With BIOS Configuration, you can ● Manage power-on passwords and administrator passwords. ● Configure other power-on authentication...
ProtectTools (Select Models Only) - Windows Vista
Page 41
...that run when you turn on or restart the computer. If you have enabled MultiBoot, select the boot order by pressing f10 at the BIOS administrator password prompt, and then click OK. Enable or disable MultiBoot. 7. To manage boot options: 1. Managing boot options You can use... Computer Setup. Enter your changes. For more information about setting the Computer Setup setup password, refer to "Setting the setup password," later in the HP ProtectTools window to adjust its order in seconds) for f9, f10 and f12, and for Express Boot Popup Delay (Sec). 6. Select Start > All ...
...that run when you turn on or restart the computer. If you have enabled MultiBoot, select the boot order by pressing f10 at the BIOS administrator password prompt, and then click OK. Enable or disable MultiBoot. 7. To manage boot options: 1. Managing boot options You can use... Computer Setup. Enter your changes. For more information about setting the Computer Setup setup password, refer to "Setting the setup password," later in the HP ProtectTools window to adjust its order in seconds) for f9, f10 and f12, and for Express Boot Popup Delay (Sec). 6. Select Start > All ...
ProtectTools (Select Models Only) - Windows Vista
Page 42
Select Start > All Programs > HP ProtectTools Security Manager. 2. Enter your computer. In the left pane, click System Configuration, and then ... Boot Mode (PXE or RPL) ● Boot Order ● Device Configurations ● NumLock at the BIOS administrator password prompt, and then click OK. 4. To enable or disable devices or security options: 1. In the left pane, click... BIOS Configuration. 3. Enabling and disabling system configuration options NOTE Some of the items listed below may not be ...
Select Start > All Programs > HP ProtectTools Security Manager. 2. Enter your computer. In the left pane, click System Configuration, and then ... Boot Mode (PXE or RPL) ● Boot Order ● Device Configurations ● NumLock at the BIOS administrator password prompt, and then click OK. 4. To enable or disable devices or security options: 1. In the left pane, click... BIOS Configuration. 3. Enabling and disabling system configuration options NOTE Some of the items listed below may not be ...
ProtectTools (Select Models Only) - Windows Vista
Page 43
ENWW General tasks 37 Click Apply, and then click OK in the HP ProtectTools window to save your changes and exit. ● Parallel port mode (standard, bidirectional, EPP, or ECP) ● Data Execution Prevention ● SATA Native Mode ...9679; Dual Core CPU ● Automatic Intel® SpeedStep Functionality Support ● Fan Always on While on AC Power ● BIOS DMA Data Transfers ● Intel or AMD PSAE Execution Disable ● Built-In Device Options ● Embedded WLAN Device Radio ● Embedded WWAN Device Radio...
ENWW General tasks 37 Click Apply, and then click OK in the HP ProtectTools window to save your changes and exit. ● Parallel port mode (standard, bidirectional, EPP, or ECP) ● Data Execution Prevention ● SATA Native Mode ...9679; Dual Core CPU ● Automatic Intel® SpeedStep Functionality Support ● Fan Always on While on AC Power ● BIOS DMA Data Transfers ● Intel or AMD PSAE Execution Disable ● Built-In Device Options ● Embedded WLAN Device Radio ● Embedded WWAN Device Radio...
ProtectTools (Select Models Only) - Windows Vista
Page 44
... power-on authentication, click Disable. 6. Click Apply, and then click OK in BIOS Configuration. Enter your changes. 38 Chapter 5 BIOS Configuration for HP ProtectTools module. Under Smart Card Security, click Enable. In the left pane, click BIOS Configuration. 3. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, click Security. 5. NOTE To disable...
... power-on authentication, click Disable. 6. Click Apply, and then click OK in BIOS Configuration. Enter your changes. 38 Chapter 5 BIOS Configuration for HP ProtectTools module. Under Smart Card Security, click Enable. In the left pane, click BIOS Configuration. 3. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, click Security. 5. NOTE To disable...