Security Document Part Number: 405531-001 January 2006
Contents 1 Security features 2 Passwords Computer Setup and Windows passwords. . . . . . . . . . . . 2–1 Coordinating passwords . . . . . . . . . . . . . . . . . . . . . . 2–4 Choosing a password . . . . . . . . . . . . . . . . . . . . . . . . . 2–4 Computer Setup setup password . . . . . . . . . . . . . . . . . . . 2–5 Setting a setup password . . . . . . . . . . . . . . . . . . . . . . 2–6 Entering a setup password . . . . . . . . . . . . . . . . . . . . . 2–6 Computer Setup power-on password . . . . . .
Contents 4 Antivirus software (select models only) 5 Firewall software 6 Critical security updates (select models only) 7 ProtectTools Security Manager (select models only) Embedded Security for ProtectTools . . . . . . . . . . . . . . . . Credential Manager for ProtectTools. . . . . . . . . . . . . . . . BIOS Configuration for ProtectTools . . . . . . . . . . . . . . . Smart Card Security for ProtectTools . . . . . . . . . . . . . . . Java Card Security for ProtectTools . . . . . . . . . . . . . . . .
1 Security features solutions are designed to act as deterrents. These ✎ Security deterrents may not prevent a product from being mishandled or stolen. computer supports CompuTrace, which is an online ✎ Your security-based tracking and recovery service. If the computer is stolen, CompuTrace can track the computer if the unauthorized user accesses the Internet. You must purchase the software and subscribe to the service in order to use CompuTrace.
Security features To protect against Use this security feature Unauthorized use of the computer ■ Power-on authentication using passwords or smart cards ■ ProtectTools Security Manager For additional information, refer to “ProtectTools Security Manager (select models only).
Security features To protect against Use this security feature Unauthorized access to Computer Setup settings and other system identification information Setup password in Computer Setup* Unauthorized removal of the computer Security cable slot (used with an optional security cable). For additional information, refer to “Security cable.” *Computer Setup is a non-Windows utility accessed by pressing f10 when the computer is turned on or restarted.
2 Passwords Computer Setup and Windows passwords Most security features use passwords. Whenever you set a password, write down the password and store it in a secure location away from the computer. Note the following password considerations: Setup, power-on, and DriveLock passwords are set in Computer Setup and are managed by the system BIOS.
Passwords ■ If you forget the power-on password and the setup password set in Computer Setup, you cannot turn on the computer or restore from hibernation. Call Customer Care or your service partner for additional information. ■ If you forget both the user and the master DriveLock passwords set in Computer Setup, the hard drive that is protected by the passwords is permanently locked and can no longer be used. For additional information, refer to “Computer Setup DriveLock.
Passwords Computer Setup password Function Embedded security password When enabled as a BIOS password, protects access to the computer contents when the computer is turned on, restarted, or restored from hibernation. This password requires the optional embedded security chip to support this security feature. For additional information, refer to “ProtectTools Security Manager (select models only).
Passwords Coordinating passwords A Computer Setup setup password and a Windows administrator password have different functions. A Windows administrator password cannot be used to access Computer Setup, and a Computer Setup setup password cannot provide administrator-level access to your computer contents. You must use a Computer Setup password at a Computer Setup password prompt and a Windows password at a Windows password prompt.
Passwords Computer Setup setup password The Computer Setup setup password protects the configuration settings and system identification information in Computer Setup. After this password is set, it must be entered to access Computer Setup and to make changes using Computer Setup. The setup password Security ■ Is not interchangeable with a Windows administrator password, although both passwords can be identical. ■ Is not displayed as it is set, entered, changed, or deleted.
Passwords Setting a setup password A setup password is set, changed, and deleted in Computer Setup. To manage this password: 1. Open Computer Setup by turning on or restarting the computer, and then pressing f10 while the “F10 = ROM Based Setup” message is displayed in the lower-left corner of the screen. 2. Use the arrow keys to select Security > Setup password, and then press enter. ❏ To set a setup password: Type your password in the New password and Verify new password fields, and then press f10.
Passwords Computer Setup power-on password The Computer Setup power-on password prevents unauthorized use of the computer. After this password is set, it must be entered each time the computer is turned on. A power-on password Security ■ Is not displayed as it is set, entered, changed, or deleted. ■ Must be set and entered with the same keys. For example, a power-on password set with keyboard number keys will not be recognized if you enter it thereafter with embedded numeric keypad number keys.
Passwords Setting a power-on password A power-on password is set, changed, and deleted in Computer Setup. To manage this password: 1. Open Computer Setup by turning on or restarting the computer, and then pressing f10 while the “F10 = ROM Based Setup” message is displayed in the lower-left corner of the screen. 2. Use the arrow keys to select Security > Power-On password, and then press enter.
Passwords Requiring a power-on password at restart In addition to requiring that a power-on password be entered each time the computer is turned on, you can also require that a power-on password be entered each time the computer is restarted. To enable and disable this feature in Computer Setup: 1. Open Computer Setup by turning on or restarting the computer, and then pressing f10 while the “F10 = ROM Based Setup” message is displayed in the lower-left corner of the screen. 2.
Passwords Computer Setup DriveLock Ä CAUTION: To prevent the DriveLock-protected hard drive from becoming permanently unusable, record the DriveLock user password and the DriveLock master password in a safe place away from your computer. If you forget both DriveLock passwords, the hard drive will be permanently locked and can no longer be used. DriveLock protection prevents unauthorized access to the contents of a hard drive. DriveLock can be applied only to the internal hard drive(s) of the computer.
Passwords Setting a DriveLock password To access the DriveLock settings in Computer Setup: 1. Open Computer Setup by turning on or restarting the computer, and then pressing f10 while the “F10 = ROM Based Setup” message is displayed in the lower-left corner of the screen. 2. Use the arrow keys to select Security > DriveLock passwords, and then press enter. 3. Select the location of the hard drive for protection, and then press f10. 4.
Passwords Entering a DriveLock password Be sure that the hard drive is inserted into the computer (not into an optional docking device or external MultiBay). At the DriveLock HDD Bay Password prompt, type your user or master password (using the same kind of keys you used to set the password), and then press enter. 2 incorrect attempts to enter the password, you must ✎ After restart the computer and try again. Changing a DriveLock password To access the DriveLock settings in Computer Setup: 1.
Passwords Removing DriveLock protection To access the DriveLock settings in Computer Setup: 1. Open Computer Setup by turning on or restarting the computer, and then pressing f10 while the “F10 = ROM Based Setup” message is displayed in the lower-left corner of the screen. 2. Use the arrow keys to select Security > DriveLock passwords, and then press enter. 3. Use the arrow keys to select the location of the hard drive, and then press f10. 4.
3 Computer Setup security features Device Security From the Boot options menu or the Port options menu in Computer Setup, you can disable or enable system devices. To disable or reenable the system devices in Computer Setup: 1. Open Computer Setup by turning on or restarting the computer, and then pressing f10 while the “F10 = ROM Based Setup” message is displayed in the lower-left corner of the screen. 2.
Computer Setup security features Computer Setup stringent security Ä CAUTION: To prevent the computer from becoming permanently unusable, record your configured setup password, power-on password, or smart card PIN in a safe place away from your computer. Without these passwords or PIN, the computer cannot be unlocked.
Computer Setup security features Removing stringent security To remove stringent security in Computer Setup: 1. Open Computer Setup by turning on or restarting the computer, and then pressing f10 while the “F10 = ROM Based Setup” message is displayed in the lower-left corner of the screen. 2. Use the arrow keys to select Security > Password options, and then press enter. 3. Use the arrow keys to select Disable in the Stringent security field, and then press f10. 4.
Computer Setup security features Computer Setup System Information The System Information feature in Computer Setup provides 2 types of system information: ■ Identification information about the computer model and the battery packs. ■ Specification information about the processor, cache, memory, ROM, video revision, and keyboard controller revision. To view this general system information, use the arrow keys to select File > System Information.
Computer Setup security features Computer Setup System IDs The System IDs feature in Computer Setup allows you to display or enter the computer asset tag and ownership tag. prevent unauthorized access to this information, you must ✎ Tocreate a setup password in Computer Setup. For additional information, refer to “Setting a setup password.” To manage this feature: 1.
4 Antivirus software (select models only) When you use the computer for e-mail, network, or Internet access, you expose the computer to computer viruses. Computer viruses can disable the operating system, applications, or utilities, or cause them to function abnormally. Antivirus software can detect most viruses, destroy them, and in most cases, repair any damage they have caused. To provide ongoing protection against newly discovered viruses, antivirus software must updated.
5 Firewall software When you use the computer for e-mail, network, or Internet access, unauthorized persons may be able to gain access to information about you, the computer, and your information. Use the firewall software preinstalled on the computer to protect your privacy. Firewall features include logging, reporting, and automatic alarms to monitor all incoming and outgoing traffic. Refer to the firewall documentation or contact your firewall manufacturer for more information.
6 Critical security updates (select models only) Ä CAUTION: To protect the computer from security breaches and computer viruses, install the online critical updates from Microsoft as soon as you receive an alert. A Critical Security Updates for Windows XP disc may have been included with your computer to provide additional updates delivered after the computer was configured. To update your system using the Critical Security Updates for Windows XP disc: 1. Insert the disc into the drive.
7 ProtectTools Security Manager (select models only) Select computer models come with ProtectTools Security Manager preinstalled. This software can be accessed through the Microsoft Windows Control Panel. It provides security features that help protect against unauthorized access to the computer, networks, and critical data.
ProtectTools Security Manager (select models only) Embedded Security for ProtectTools must have the optional trusted platform module (TPM) ✎ You embedded security chip installed in your computer in order to use Embedded Security for ProtectTools. Embedded Security for ProtectTools has security features that protect against unauthorized access to user data or credentials, which include the following: ■ Administrative functions, such as ownership and management of the owner pass phrase.
ProtectTools Security Manager (select models only) Credential Manager for ProtectTools Credential Manager for ProtectTools has security features that provide protection against unauthorized access to your computer, including the following: ■ Alternatives to passwords when logging on to Microsoft Windows, such as using a smart card to log on to Windows. ■ Single sign-on capability that automatically remembers credentials for Web sites, applications, and protected network resources.
ProtectTools Security Manager (select models only) BIOS Configuration for ProtectTools BIOS Configuration for ProtectTools provides access to BIOS (Computer Setup) security and configuration settings within the ProtectTools Security Manager application. This gives users better access to system security features that are managed by Computer Setup. With BIOS Configuration for ProtectTools, you can ■ Manage power-on passwords and setup passwords.
ProtectTools Security Manager (select models only) Smart Card Security for ProtectTools Smart Card Security for ProtectTools manages the smart card setup and configuration for computers equipped with an optional smart card reader. ✎ Both smart cards and Java Cards use a smart card reader. With Smart Card Security for ProtectTools, you can ■ Access smart card security features. Security enhancements are supported by the optional ProtectTools Smart Card and a smart card reader.
ProtectTools Security Manager (select models only) Java Card Security for ProtectTools Java™ Card Security for ProtectTools manages the Java Card setup and configuration for computers equipped with an optional smart card reader. ✎ Both Java Cards and smart cards use a smart card reader. With Java Card Security for ProtectTools, you can ■ Access Java Card security features. Security enhancements are supported by the optional ProtectTools Java Card and a smart card reader.
8 Security cable security cable is designed to act as a deterrent, but may not ✎ The prevent the computer from being mishandled or stolen. To install a security cable: 1. Loop the security cable around a secured object. 2. Insert the key 1 into the cable lock 2. 3. Insert the cable lock into the security cable slot on the computer 3, and then lock the cable lock with the key. computer may look different from the illustration. The ✎ Your location of the security cable slot varies by model.
Index B L BIOS Configuration for ProtectTools 7–4 BIOS information, displaying 1–2 lock, security cable 8–1 C cable lock, security 8–1 Computer Setup passwords 2–1 Credential Manager for ProtectTools 7–3 Critical Security Updates for Windows XP 6–1 operating system passwords 2–1 security 1–1 P DriveLock passwords 2–2 passwords Computer Setup 2–1 DriveLock 2–11 power-on 2–7 setup 2–2 user 2–3 Windows 2–1 power-on password 2–2 E S Embedded Security for ProtectTools 7–2 security cable lock, connect
Index U user password 2–3 V viruses, antivirus software 4–1 W Windows administrator password 2–3 Windows firewall 1–2 Index–2 Security
© Copyright 2006 Hewlett-Packard Development Company, L.P. Microsoft and Windows are U.S. registered trademarks of Microsoft Corporation. Java is a U.S. trademark of Sun Microsystems, Inc. The information contained herein is subject to change without notice. The only warranties for HP products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty.
