ProtectTools (Select Models Only) - Windows Vista
Page 3
...HP ProtectTools Security Manager 2 Understanding security roles ...2 Managing HP ProtectTools passwords 3 Creating a secure password 5 2 Smart Card Security for HP ProtectTools Initializing the smart card ...7 Smart card BIOS security mode ...8 Enabling smart card BIOS security mode and setting the smart card administrator password ...9 Disabling smart card BIOS... the smart card user password 11 Storing the administrator or user card password 12 General tasks ...13 Updating BIOS smart card settings 13 Selecting the smart card reader 13 Changing the smart card PIN 13 Backing up and...
...HP ProtectTools Security Manager 2 Understanding security roles ...2 Managing HP ProtectTools passwords 3 Creating a secure password 5 2 Smart Card Security for HP ProtectTools Initializing the smart card ...7 Smart card BIOS security mode ...8 Enabling smart card BIOS security mode and setting the smart card administrator password ...9 Disabling smart card BIOS... the smart card user password 11 Storing the administrator or user card password 12 General tasks ...13 Updating BIOS smart card settings 13 Selecting the smart card reader 13 Changing the smart card PIN 13 Backing up and...
ProtectTools (Select Models Only) - Windows Vista
Page 4
...disabling Embedded Security 32 Enabling Embedded Security after permanent disable 32 Migrating keys with the Migration Wizard 33 5 BIOS Configuration for HP ProtectTools General tasks ...35 Managing boot options ...35 Enabling and disabling system configuration options 36 Advanced tasks ...38 Managing...options 42 Enabling and disabling stringent security 42 Enabling and disabling power-on authentication on Windows restart 42 6 Credential Manager for HP ProtectTools Setup procedures ...45 Logging on to Credential Manger 45 Using the Credential Manager Logon Wizard 45 Logging on for the ...
...disabling Embedded Security 32 Enabling Embedded Security after permanent disable 32 Migrating keys with the Migration Wizard 33 5 BIOS Configuration for HP ProtectTools General tasks ...35 Managing boot options ...35 Enabling and disabling system configuration options 36 Advanced tasks ...38 Managing...options 42 Enabling and disabling stringent security 42 Enabling and disabling power-on authentication on Windows restart 42 6 Credential Manager for HP ProtectTools Setup procedures ...45 Logging on to Credential Manger 45 Using the Credential Manager Logon Wizard 45 Logging on for the ...
ProtectTools (Select Models Only) - Windows Vista
Page 7
... is provided by the following software modules: ● Smart Card Security for HP ProtectTools ● Java Card Security for HP ProtectTools ● Embedded Security for HP ProtectTools ● BIOS Configuration for HP ProtectTools ● Credential Manager for HP ProtectTools ● Device Access Manager for HP ProtectTools The software modules available for your computer may be installed on...
... is provided by the following software modules: ● Smart Card Security for HP ProtectTools ● Java Card Security for HP ProtectTools ● Embedded Security for HP ProtectTools ● BIOS Configuration for HP ProtectTools ● Credential Manager for HP ProtectTools ● Device Access Manager for HP ProtectTools The software modules available for your computer may be installed on...
ProtectTools (Select Models Only) - Windows Vista
Page 8
... Security Manager. Can also enable and disable some features. Accessing the HP ProtectTools Security Manager To access the HP ProtectTools Security Manager from the Windows logon screen. For HP ProtectTools, the security duties and privileges can enable smart card BIOS security mode. ● User-Uses the security features. For example, if the security officer...
... Security Manager. Can also enable and disable some features. Accessing the HP ProtectTools Security Manager To access the HP ProtectTools Security Manager from the Windows logon screen. For HP ProtectTools, the security duties and privileges can enable smart card BIOS security mode. ● User-Uses the security features. For example, if the security officer...
ProtectTools (Select Models Only) - Windows Vista
Page 9
... , restarted, or restored from hibernation. ENWW Managing HP ProtectTools passwords 3 Managing HP ProtectTools passwords Most of the HP ProtectTools Security Manager features are set by regular users or administrators. The passwords that contains the BIOS passwords. When used for smart card power-on (BIOS) authentication. Power-on password BIOS Configuration Protects access to the computer contents...
... , restarted, or restored from hibernation. ENWW Managing HP ProtectTools passwords 3 Managing HP ProtectTools passwords Most of the HP ProtectTools Security Manager features are set by regular users or administrators. The passwords that contains the BIOS passwords. When used for smart card power-on (BIOS) authentication. Power-on password BIOS Configuration Protects access to the computer contents...
ProtectTools (Select Models Only) - Windows Vista
Page 12
... Smart Card Security for HP ProtectTools manages the smart card setup and configuration for computers equipped with the Computer Setup utility to enable smart card authentication in a power-on environment, and to authenticate users of the smart card. ● Back up and restore smart card BIOS passwords stored on the smart card.... 6 Chapter 2 Smart Card Security for HP ProtectTools ENWW
... Smart Card Security for HP ProtectTools manages the smart card setup and configuration for computers equipped with the Computer Setup utility to enable smart card authentication in a power-on environment, and to authenticate users of the smart card. ● Back up and restore smart card BIOS passwords stored on the smart card.... 6 Chapter 2 Smart Card Security for HP ProtectTools ENWW
ProtectTools (Select Models Only) - Windows Vista
Page 14
... smart card. 8 Chapter 2 Smart Card Security for HP ProtectTools ENWW Enable Smart Card Power-on Authentication Support in Smart Card Security. Enable smart card BIOS security mode in BIOS Configuration. Refer to "Enabling smart card BIOS security mode and setting the smart card administrator password," ... smart card administrator password is set as the Computer Setup setup password. The smart card BIOS security mode features are unavailable until you to use a smart card for HP ProtectTools." Refer to "Enabling and disabling smart card or Java Card power-on authentication support...
... smart card. 8 Chapter 2 Smart Card Security for HP ProtectTools ENWW Enable Smart Card Power-on Authentication Support in Smart Card Security. Enable smart card BIOS security mode in BIOS Configuration. Refer to "Enabling smart card BIOS security mode and setting the smart card administrator password," ... smart card administrator password is set as the Computer Setup setup password. The smart card BIOS security mode features are unavailable until you to use a smart card for HP ProtectTools." Refer to "Enabling and disabling smart card or Java Card power-on authentication support...
ProtectTools (Select Models Only) - Windows Vista
Page 15
... the smart card administrator password. NOTE If smart card BIOS security mode has previously been enabled, the button on -screen instructions. Select Start > All Programs > HP ProtectTools Security Manager. 2. Enabling smart card BIOS security mode and setting the smart card administrator password To... enable smart card BIOS security mode and set the smart card administrator password: 1. Click Next....
... the smart card administrator password. NOTE If smart card BIOS security mode has previously been enabled, the button on -screen instructions. Select Start > All Programs > HP ProtectTools Security Manager. 2. Enabling smart card BIOS security mode and setting the smart card administrator password To... enable smart card BIOS security mode and set the smart card administrator password: 1. Click Next....
ProtectTools (Select Models Only) - Windows Vista
Page 16
... has been set as part of the process for HP ProtectTools ENWW Select Start > All Programs > HP ProtectTools Security Manager. 2. Enter the smart card PIN and click Finish. 10 Chapter 2 Smart Card Security for enabling smart card BIOS security mode. In the left pane, click Smart Card... Security, and then click BIOS. 3. Changing the smart card administrator ...
... has been set as part of the process for HP ProtectTools ENWW Select Start > All Programs > HP ProtectTools Security Manager. 2. Enter the smart card PIN and click Finish. 10 Chapter 2 Smart Card Security for enabling smart card BIOS security mode. In the left pane, click Smart Card... Security, and then click BIOS. 3. Changing the smart card administrator ...
ProtectTools (Select Models Only) - Windows Vista
Page 17
Select Start > All Programs > HP ProtectTools Security Manager. 2. Generating a random password offers more information... manually. ● Generate a random 32-byte password. In the left pane, click Smart Card Security, and then click BIOS. 3. Omit steps 6 through 8 and go to "Creating a recovery file," later in this check box. 8. Enter the... smart card PIN in Computer Setup, click the Change button. 4. In the BIOS Password Wizard, you must have a recovery file to create duplicate cards without using a recovery file. The system prompts...
Select Start > All Programs > HP ProtectTools Security Manager. 2. Generating a random password offers more information... manually. ● Generate a random 32-byte password. In the left pane, click Smart Card Security, and then click BIOS. 3. Omit steps 6 through 8 and go to "Creating a recovery file," later in this check box. 8. Enter the... smart card PIN in Computer Setup, click the Change button. 4. In the BIOS Password Wizard, you must have a recovery file to create duplicate cards without using a recovery file. The system prompts...
ProtectTools (Select Models Only) - Windows Vista
Page 18
...click Store. 5. Under Access Privilege, click either ● Enter a password manually. ● Generate a random 32-byte password. In the BIOS Password Wizard, you to create duplicate cards without using a recovery file. Generating a random password offers more information, refer to "Creating a ...Setup. NOTE If you can either Administrator or User for HP ProtectTools ENWW Select Start > All Programs > HP ProtectTools Security Manager. 3. In the left pane, click Smart Card Security, and then click BIOS. 4. For more security; Storing the administrator or user card...
...click Store. 5. Under Access Privilege, click either ● Enter a password manually. ● Generate a random 32-byte password. In the BIOS Password Wizard, you to create duplicate cards without using a recovery file. Generating a random password offers more information, refer to "Creating a ...Setup. NOTE If you can either Administrator or User for HP ProtectTools ENWW Select Start > All Programs > HP ProtectTools Security Manager. 3. In the left pane, click Smart Card Security, and then click BIOS. 4. For more security; Storing the administrator or user card...
ProtectTools (Select Models Only) - Windows Vista
Page 19
... is not selected in Smart Card Security before using the smart card. In the left pane, click Smart Card Security, and then click BIOS. 3. The reader information is selected in Smart Card Security, some of the features may be unavailable or incorrectly displayed. Set and confirm...box to require a PIN at reboot. To select the smart card reader: 1. In the right pane, under Smart Card BIOS Password Properties, click Settings. 4. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, click Smart Card Security, and then click General. 3. NOTE To eliminate this...
... is not selected in Smart Card Security before using the smart card. In the left pane, click Smart Card Security, and then click BIOS. 3. The reader information is selected in Smart Card Security, some of the features may be unavailable or incorrectly displayed. Set and confirm...box to require a PIN at reboot. To select the smart card reader: 1. In the right pane, under Smart Card BIOS Password Properties, click Settings. 4. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, click Smart Card Security, and then click General. 3. NOTE To eliminate this...
ProtectTools (Select Models Only) - Windows Vista
Page 26
...the right pane, under Java Card name, click Change. 6. Click OK. Enable Java Card power-on authentication in Chapter 5, "BIOS Configuration for power-on authentication and creating an administrator Java Card," later in the Name box. 7. Refer to "Enabling Java Card... power-on authentication When enabled, power-on authentication support in the PIN box. 8. Select Start > All Programs > HP ProtectTools Security Manager. 2. Enter a name for HP ProtectTools ENWW Refer to "Enabling and disabling smart card or Java Card power-on authentication involves the following steps: 1.
...the right pane, under Java Card name, click Change. 6. Click OK. Enable Java Card power-on authentication in Chapter 5, "BIOS Configuration for power-on authentication and creating an administrator Java Card," later in the Name box. 7. Refer to "Enabling Java Card... power-on authentication When enabled, power-on authentication support in the PIN box. 8. Select Start > All Programs > HP ProtectTools Security Manager. 2. Enter a name for HP ProtectTools ENWW Refer to "Enabling and disabling smart card or Java Card power-on authentication involves the following steps: 1.
ProtectTools (Select Models Only) - Windows Vista
Page 31
...using the Embedded Security software The TPM embedded security chip enhances and enables other HP ProtectTools Security Manager security features. For example, Credential Manager for HP ProtectTools can use Embedded Security for third-party applications (such as an authentication factor...to user data or credentials. On select models, the TPM embedded security chip also enables enhanced BIOS security features accessed through BIOS Configuration for HP ProtectTools protects against unauthorized access to Windows. ENWW 25 This software module provides the following security features...
...using the Embedded Security software The TPM embedded security chip enhances and enables other HP ProtectTools Security Manager security features. For example, Credential Manager for HP ProtectTools can use Embedded Security for third-party applications (such as an authentication factor...to user data or credentials. On select models, the TPM embedded security chip also enables enhanced BIOS security features accessed through BIOS Configuration for HP ProtectTools protects against unauthorized access to Windows. ENWW 25 This software module provides the following security features...
ProtectTools (Select Models Only) - Windows Vista
Page 32
Open Computer Setup by turning on -screen instructions. 26 Chapter 4 Embedded Security for HP ProtectTools. Select Embedded security device state and change to the Embedded Security configuration. 8. In the Security menu, use the arrow keys to select Security > Setup .... 2. If you have not set an administrator password, use the arrow keys to select TPM Embedded Security, and then press enter. 5. Follow the steps in BIOS Configuration for HP ProtectTools ENWW To enable the embedded security chip: 1.
Open Computer Setup by turning on -screen instructions. 26 Chapter 4 Embedded Security for HP ProtectTools. Select Embedded security device state and change to the Embedded Security configuration. 8. In the Security menu, use the arrow keys to select Security > Setup .... 2. If you have not set an administrator password, use the arrow keys to select TPM Embedded Security, and then press enter. 5. Follow the steps in BIOS Configuration for HP ProtectTools ENWW To enable the embedded security chip: 1.
ProtectTools (Select Models Only) - Windows Vista
Page 40
5 BIOS Configuration for HP ProtectTools BIOS Configuration for HP ProtectTools are managed by Computer Setup. This gives users Windows access to the Computer Setup utility security and configuration settings. With BIOS Configuration, you can ● Manage power-on passwords and administrator passwords. ● Configure other power-on ...Configure boot options, which includes enabling MultiBoot and changing the boot order. NOTE Many of the features in BIOS Configuration for HP ProtectTools provides access to system security features that are also available in Computer Setup. 34 Chapter...
5 BIOS Configuration for HP ProtectTools BIOS Configuration for HP ProtectTools are managed by Computer Setup. This gives users Windows access to the Computer Setup utility security and configuration settings. With BIOS Configuration, you can ● Manage power-on passwords and administrator passwords. ● Configure other power-on ...Configure boot options, which includes enabling MultiBoot and changing the boot order. NOTE Many of the features in BIOS Configuration for HP ProtectTools provides access to system security features that are also available in Computer Setup. 34 Chapter...
ProtectTools (Select Models Only) - Windows Vista
Page 41
...In the left pane, click BIOS Configuration. 3. Enable or disable MultiBoot. 7. If you have already set the Computer Setup setup password. ENWW General tasks 35 In the left pane, click System Configuration. 5. Enter your changes. Click Apply, and then click OK in the HP ProtectTools window to save your ... a boot device, and then clicking the up arrow or the down arrow to adjust its order in this chapter. 4. General tasks BIOS Configuration allows you to manage various computer settings that run when you turn on or restart the computer. Managing boot options You can use...
...In the left pane, click BIOS Configuration. 3. Enable or disable MultiBoot. 7. If you have already set the Computer Setup setup password. ENWW General tasks 35 In the left pane, click System Configuration. 5. Enter your changes. Click Apply, and then click OK in the HP ProtectTools window to save your ... a boot device, and then clicking the up arrow or the down arrow to adjust its order in this chapter. 4. General tasks BIOS Configuration allows you to manage various computer settings that run when you turn on or restart the computer. Managing boot options You can use...
ProtectTools (Select Models Only) - Windows Vista
Page 42
...enable or disable devices or security options: 1. Enter your computer. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, click BIOS Configuration. 3. Enabling and disabling system configuration options NOTE Some of the items listed below may not be...administrator password at Boot ● Swapping fn/Ctrl Keys ● Multiple Pointing Devices ● USB Legacy Support 36 Chapter 5 BIOS Configuration for HP ProtectTools ENWW In the left pane, click System Configuration, and then enable or disable a system configuration option, or configure a ...
...enable or disable devices or security options: 1. Enter your computer. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, click BIOS Configuration. 3. Enabling and disabling system configuration options NOTE Some of the items listed below may not be...administrator password at Boot ● Swapping fn/Ctrl Keys ● Multiple Pointing Devices ● USB Legacy Support 36 Chapter 5 BIOS Configuration for HP ProtectTools ENWW In the left pane, click System Configuration, and then enable or disable a system configuration option, or configure a ...
ProtectTools (Select Models Only) - Windows Vista
Page 43
... Prevention ● SATA Native Mode ● Dual Core CPU ● Automatic Intel® SpeedStep Functionality Support ● Fan Always on While on AC Power ● BIOS DMA Data Transfers ● Intel or AMD PSAE Execution Disable ● Built-In Device Options ● Embedded WLAN Device Radio ● Embedded WWAN Device Radio...® Device Radio ● LAN/WLAN Switching ● Wake on LAN from Off 5. ENWW General tasks 37 Click Apply, and then click OK in the HP ProtectTools window to save your changes and exit.
... Prevention ● SATA Native Mode ● Dual Core CPU ● Automatic Intel® SpeedStep Functionality Support ● Fan Always on While on AC Power ● BIOS DMA Data Transfers ● Intel or AMD PSAE Execution Disable ● Built-In Device Options ● Embedded WLAN Device Radio ● Embedded WWAN Device Radio...® Device Radio ● LAN/WLAN Switching ● Wake on LAN from Off 5. ENWW General tasks 37 Click Apply, and then click OK in the HP ProtectTools window to save your changes and exit.
ProtectTools (Select Models Only) - Windows Vista
Page 44
... feature, you must also configure the smart card using the Smart Card Security for HP ProtectTools or Java Card Security for HP ProtectTools module. In the left pane, click BIOS Configuration. 3. Enabling and disabling smart card or Java Card power-on authentication support ...card or the Java Card for HP ProtectTools ENWW NOTE To fully enable the power-on authentication support: 1. Enter your changes. 38 Chapter 5 BIOS Configuration for user authentication when you to save your Computer Setup administrator password at the BIOS administrator password prompt, and then ...
... feature, you must also configure the smart card using the Smart Card Security for HP ProtectTools or Java Card Security for HP ProtectTools module. In the left pane, click BIOS Configuration. 3. Enabling and disabling smart card or Java Card power-on authentication support ...card or the Java Card for HP ProtectTools ENWW NOTE To fully enable the power-on authentication support: 1. Enter your changes. 38 Chapter 5 BIOS Configuration for user authentication when you to save your Computer Setup administrator password at the BIOS administrator password prompt, and then ...