HP ProtectTools Troubleshooting Guide

Technical Reference Guide www.hp.com 5
HP ProtectTools Troubleshooting Guide
HP ProtectTools Embedded
Security—Initialization fails
for TPM module after
system restore.
If the user restores the hard
drive from the restore CD,
initialization of the TPM fails.
This is as designed.
The TPM must be reset and enabled again in
Computer Setup (F10) Utility prior to
initialization.
HP ProtectTools Embedded
Security—Windows 2000
User can share to the
network any PSD with the
hidden ($) share
Windows 2000 User can
share to the network any PSD
with the hidden ($) share. The
hidden share can be
accessed over the network
using the hidden ($) share.
The PSD is not normally shared on the network,
but it can be through the hidden ($) share in
W2K only. HP recommends always having the
built-in Administrator account
password-protected.
HP ProtectTools Embedded
Security—User is able to
encrypt or delete the
recovery archive XML file
By design, the ACLs for this
folder is not set; therefore, a
user can inadvertently or
purposely encrypt or delete
the file, making it
inaccessible. Once this file
has been encrypted or
deleted, no one can use the
TPM software.
This is as designed.
Users have access rights to an emergency
archive in order to save/update their basic user
key backup copy. Customers should adopt a
'best practices' security approach and instruct
users never to encrypt or delete the recovery
archive files.
HP ProtectTools Embedded
Security—HP ProtectTools
Embedded Security EFS
interaction with Norton
Antivirus produces longer
encryption/decryption and
scan times
Encrypted files interfere with
Norton Anti Virus 2005 virus
scan. During the scan
process, the Basic User Key
password prompt asks the
user for a password every
10 files or so. If the user does
not enter a password, the
Basic User Key password
prompt times out, allowing
NAV2005 to continue with
the scan. Encrypting files
using HP ProtectTools
Embedded Security EFS takes
longer when Norton Antivirus
is running.
To reduce the time required to scan HP
ProtectTools Embedded Security EFS files, the
user can either enter the encryption password
before scanning or decrypt before scanning.
To reduce the time required to encrypt/decrypt
data using HP ProtectTools Embedded Security
EFS, the user should disable Auto-Protect on
Norton Antivirus.
HP ProtectTools Embedded
Security—Cannot save
emergency recovery
archive to removable
media
If the user inserts an MMC or
SD card when creating the
emergency recovery archive
path during Embedded
Security Initialization, an
error message is displayed.
This is as designed.
Storage of the recovery archive on removable
media is not supported. The recovery archive
can be stored on a network drive or another
local drive other than the C drive.
Software
Impacted-Short
description
Details Solution / Workaround