ProtectTools User Guide
© Copyright 2007 Hewlett-Packard Development Company, L.P. Microsoft and Windows are U.S. registered trademarks of Microsoft Corporation. Intel is a trademark or registered trademark of Intel Corporation or its subsidiaries in the United States and other countries. AMD, the AMD Arrow logo, and combinations thereof are trademarks of Advanced Micro Devices, Inc. Bluetooth is a trademark owned by its proprietor and used by Hewlett-Packard Company under license. Java is a US trademark of Sun Microsystems, Inc.
Table of contents 1 Introduction to security HP ProtectTools features ..................................................................................................................... 2 Accessing HP ProtectTools Security .................................................................................................... 3 Achieving key security objectives ......................................................................................................... 4 Protecting against targeted theft .......
Using manual (drag and drop) registration ....................................... 19 Managing applications and credentials ............................................................. 19 Modifying application properties ....................................................... 19 Removing an application from Single Sign On ................................. 19 Exporting an application ................................................................... 19 Importing an application ..............................
Disabling Java Card power-on authentication ................................................... 41 5 BIOS Configuration for HP ProtectTools General tasks ..................................................................................................................................... 43 Managing boot options ...................................................................................................... 43 Enabling and disabling system configuration options .........................................
vi ENWW
1 Introduction to security HP ProtectTools Security Manager software provides security features that help protect against unauthorized access to the computer, networks, and critical data.
HP ProtectTools features The following table details the key features of HP ProtectTools modules: Module Key features Credential Manager for HP ProtectTools ● Credential Manager acts as a personal password vault. ● Single Sign On remembers multiple passwords for various password-protected Web sites, applications, and network resources.
Accessing HP ProtectTools Security To access HP ProtectTools Security from Windows® Control Panel: ▲ Select Start > All Programs > HP ProtectTools Security Manager. NOTE: After you have configured the Credential Manager module, you can also open HP ProtectTools by logging on to Credential Manager directly from the Windows logon screen. For more information, refer to “Logging on to Windows with Credential Manager on page 17.
Achieving key security objectives The HP ProtectTools modules can work together to provide solutions for a variety of security issues, including the following key security objectives: ● Protecting against targeted theft ● Restricting access to sensitive data ● Preventing unauthorized access from internal or external locations ● Creating strong password policies Protecting against targeted theft An example of this type of incident would be the targeted theft of a computer containing confidential data
financial services, an executive, or R&D team, or private information such as patient records or personal financial data. The following features help prevent unauthorized access: ● ● ● ● The pre-boot authentication feature, if enabled, helps prevent access to the operating system.
Additional security elements Assigning security roles In managing computer security (particularly for large organizations), one important practice is to divide responsibilities and rights among various types of administrators and users. NOTE: In a small organization or for individual use, these roles may all be held by the same person.
HP ProtectTools password Set in this HP ProtectTools module Function Owner password Embedded Security, by IT administrator Protects the system and the TPM chip from unauthorized access to all owner functions of Embedded Security. Java™ Card PIN Java Card Security Protects access to the Java Card contents and authenticates users of the Java Card. When used for power-on authentication, the Java Card PIN also protects access to the Computer Setup utility and to the computer contents.
Creating a secure password When creating passwords, you must first follow any specifications that are set by the program. In general, however, consider the following guidelines to help you create strong passwords and reduce the chances of your password being compromised: ● Use passwords with more than 6 characters, preferably more than 8. ● Mix the case of letters throughout your password. ● Whenever possible, mix alphanumeric characters and include special characters and punctuation marks.
Setting backup options 1. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, click HP ProtectTools, and then click Backup and Restore. 3. In the right pane, click Backup Options. The HP ProtectTools Backup Wizard opens. 4. Follow the on-screen instructions. 5. After you set and confirm the Storage File Password, select Remember all passwords and authentication values for future automated backups. 6. Click Save Settings, and then click Finish.
Configuring settings 10 1. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, click HP ProtectTools, and then click Settings. 3. In the right pane, select your settings, and then click OK.
2 Credential Manager for HP ProtectTools Credential Manager for HP ProtectTools protects against unauthorized access to your computer using the following security features: ENWW ● Alternatives to passwords when logging on to Windows, such as using a Java Card or biometric reader to log on to Windows. For additional information, refer to “Registering credentials on page 13.” ● Single Sign On feature that automatically remembers credentials for Web sites, applications, and protected network resources.
Setup procedures Logging on to Credential Manger Depending on the configuration, you can log on to Credential Manager in any of the following ways: ● Credential Manager Logon Wizard (preferred) ● HP ProtectTools Security Manager icon in the notification area ● HP ProtectTools Security Manager NOTE: If you use the Credential Manager Logon prompt on the Windows Logon screen to log on to Credential Manager, you are logged on to Windows at the same time.
Logging on for the first time Before you begin, you must be logged on to Windows with an administrator account, but not logged on to Credential Manager. 1. Open HP ProtectTools Security Manager by double-clicking the HP ProtectTools Security Manager icon in the notification area. The HP ProtectTools Security Manager window opens. 2. In the left pane, click Credential Manager, and then click Log On in the upper-right corner of the right pane. The Credential Manager Logon Wizard opens. 3.
Setting up the fingerprint reader 1. After logging on to Credential Manager, swipe your finger across the fingerprint reader. The Credential Manager Registration Wizard opens. 2. Follow the on-screen instructions to complete registering your fingerprints and setting up the fingerprint reader. 3. To set up the fingerprint reader for a different Windows user, log on to Windows as that user and then repeat steps 1 and 2. Using your registered fingerprint to log on to Windows 1.
General tasks All users have access to the “My Identity” page in Credential Manager. From the “My Identity” page, you can perform the following tasks: ● Creating a virtual token ● Changing the Windows logon password ● Managing a token PIN ● Managing identity ● Locking the computer NOTE: This option is available only if the Credential Manager classic logon prompt is enabled. See “Example 1—Using the “Advanced Settings” page to allow Windows logon from Credential Manager on page 25.
Managing identity Clearing an identity from the system NOTE: 16 This does not affect your Windows user account. 1. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, click Credential Manager. 3. In the right pane, click Clear Identity for this Account. 4. Click Yes in the confirmation dialog box. Your identity is logged off and removed from the system.
Locking the computer This feature is available if you log on to Windows using Credential Manager. To secure your computer when you are away from your desk, use the Lock Workstation feature. This prevents unauthorized users from gaining access to your computer. Only you and members of the administrators group on your computer can unlock it. NOTE: This option is available only if the Credential Manager classic logon prompt is enabled.
3. In the right pane, click Windows Logon, and then click Add a Network Account. The Add Network Account Wizard opens. 4. Follow the on-screen instructions. Removing an account 1. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, click Credential Manager, and then click Services and Applications. 3. In the right pane, click Windows Logon, and then click Manage Network Accounts. The Manage Network Accounts dialog box opens. 4.
Using manual (drag and drop) registration 1. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, click Credential Manager, and then click Services and Applications. 3. In the right pane, click Single Sign On, and then click Register New Application. The SSO Application Wizard opens. 4. Follow the on-screen instructions. Managing applications and credentials Modifying application properties 1. Select Start > All Programs > HP ProtectTools Security Manager. 2.
Importing an application 1. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, click Credential Manager, and then click Services and Applications. 3. In the right pane, under Single Sign On, click Manage Applications and Credentials. 4. Click the application entry you want to import. Then select More > Applications > Import Script. 5. Follow the on-screen instructions to complete the import. 6. Click OK. Modifying credentials 1.
Restricting access to an application 1. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, click Credential Manager, and then click Services and Applications. 3. In the right pane, under Application Protection, click Manage Protected Applications. The Application Protection Service dialog box opens. 4. Select a category of user whose access you want to manage.
7. 22 When you select Restricted, the following settings are available: a. If you want to restrict usage based on time, day, or date, click the Schedule tab and configure the settings. b. If you want to restrict usage based on inactivity, click the Advanced tab and select the period of inactivity. 8. Click OK to close the application Properties dialog box. 9. Click OK.
Advanced tasks (administrator only) The “Authentication and Credentials” page and the “Advanced Settings” page of Credential Manager are available only to those users with administrator rights.
Configuring custom authentication requirements If the set of authentication credentials you want is not listed on the Authentication tab of the “Authentication and Credentials” page, you can create custom requirements. To configure custom requirements: 1. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, click Credential Manager, and then click Authentication and Credentials. 3. In the right pane, click the Authentication tab. 4.
Configuring Credential Manager settings From the “Settings” page, you can access and modify various settings using the following tabs: ● General—Allows you to modify the settings for basic configuration. ● Single Sign On—Allows you to modify the settings for how Single Sign On works for the current user, such as how it handles detection of logon screens, automatic logon to registered logon dialogs, and password display.
Example 2—Using the “Advanced Settings” page to require user verification before Single Sign On 26 1. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, click Credential Manager, and then click Settings. 3. In the right pane, click the Single Sign On tab. 4. Under When registered logon dialog or Web page is visited, select the Authenticate user before submitting credentials check box. 5. Click Apply, and then click OK. 6. Restart the computer.
3 Embedded Security for HP ProtectTools NOTE: The integrated Trusted Platform Module (TPM) embedded security chip must be installed in your computer to use Embedded Security for HP ProtectTools. Embedded Security for HP ProtectTools protects against unauthorized access to user data or credentials.
Setup procedures CAUTION: To reduce security risk, it is highly recommended that your IT administrator immediately initialize the embedded security chip. Failure to initialize the embedded security chip could result in an unauthorized user, a computer worm, or a virus taking ownership of the computer and gaining control over the owner tasks, such as handling the emergency recovery archive, and configuring user access settings.
Initializing the embedded security chip In the initialization process for Embedded Security, you will perform the following tasks: ● Set an owner password for the embedded security chip that protects access to all owner functions on the embedded security chip. ● Set up the emergency recovery archive, which is a protected storage area that allows reencryption of the Basic User Keys for all users. To initialize the embedded security chip: 1.
Setting up the basic user account Setting up a basic user account in Embedded Security accomplishes the following tasks: ● Produces a Basic User Key that protects encrypted information, and sets a Basic User Key password to protect the Basic User Key. ● Sets up a personal secure drive (PSD) for storing encrypted files and folders. CAUTION: Safeguard the Basic User Key password. Encrypted information cannot be accessed or recovered without this password.
General tasks After the basic user account is set up, you can perform the following tasks: ● Encrypting files and folders ● Sending and receiving encrypted e-mail Using the Personal Secure Drive After setting up the PSD, you are prompted to type the Basic User Key password at the next logon. If the Basic User Key password is entered correctly, you can access the PSD directly from Windows Explorer.
Changing the Basic User Key password To change the Basic User Key password: 32 1. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, click Embedded Security, and then click User Settings. 3. In the right pane, under Basic User Key password, click Change. 4. Type the old password, and then set and confirm the new password. 5. Click OK.
Advanced tasks Backing up and restoring The Embedded Security backup feature creates an archive that contains certification information to be restored in case of emergency. Creating a backup file To create a backup file: 1. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, click Embedded Security, and then click Backup. 3. In the right pane, click Backup. The Embedded Security Backup Wizard opens. 4. Follow the on-screen instructions.
Changing the owner password To change the owner password: 1. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, click Embedded Security, and then click Advanced. 3. In the right pane, under Owner Password, click Change. 4. Type the old owner password, and then set and confirm the new owner password. 5. Click OK. Resetting a user password An administrator can help a user to reset a forgotten password. For more information, refer to the online Help.
Migrating keys with the Migration Wizard Migration is an advanced administrator task that allows the management, restoration, and transfer of keys and certificates. For details on migration, refer to the Embedded Security online Help.
4 Java Card Security for HP ProtectTools Java Card Security for HP ProtectTools manages the Java Card setup and configuration for computers equipped with an optional card reader. With Java Card Security, you can accomplish the following tasks: 36 ● Access Java Card Security features ● Work with the Computer Setup utility to enable Java Card authentication in a power-on environment ● Configure separate Java Cards for an administrator and a user.
General tasks The “General” page allows you to perform the following tasks: ● Change a Java Card PIN ● Select the card reader or smart card keyboard NOTE: The card reader uses both Java Cards and smart cards. This feature is available if you have more than one card reader on the computer. Changing a Java Card PIN To change a Java Card PIN: NOTE: The Java Card PIN must be between 4 and 8 numeric characters. 1. Select Start > All Programs > HP ProtectTools Security Manager. 2.
Advanced tasks (administrators only) The “Advanced” page allows you to perform the following tasks: ● Assign a Java Card PIN ● Assign a name to a Java Card ● Set power-on authentication ● Back up and restore Java Cards NOTE: You must have Windows administrator privileges in order to display the "Advanced" page. Assigning a Java Card PIN You must assign a name and a PIN to a Java Card before it can be used in Java Card Security.
Assigning a name to a Java Card You must assign a name to a Java Card before it can be used for power-on authentication. To assign a name to a Java Card: 1. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, click Java Card Security, and then click Advanced. 3. Insert the Java Card into the card reader. NOTE: If you have not assigned a PIN to this card, the New Card dialog box opens, allowing you to type a new name and PIN. 4.
Enabling Java Card power-on authentication and creating an administrator Java Card To enable Java Card power-on authentication: 1. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, click Java Card Security, and then click Advanced. 3. Insert the Java Card into the card reader. NOTE: If you have not assigned a name and PIN to this card, the New Card dialog box opens, allowing you to type a new name and PIN. 4.
Creating a user Java Card NOTE: Power-on authentication and an administrator card must be set up in order to create a user Java Card. To create a user Java Card: 1. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, click Java Card Security, and then click Advanced. 3. Insert a Java Card that will be used as a user card. 4. In the right pane, under Power-on authentication, click Create next to User card identity. 5.
5 BIOS Configuration for HP ProtectTools BIOS Configuration for HP ProtectTools provides access to the Computer Setup utility security and configuration settings. This gives users Windows access to system security features that are managed by Computer Setup. With BIOS Configuration, you can accomplish the following objectives: ● Manage power-on passwords and administrator passwords. ● Configure other power-on authentication features, such as enabling embedded security authentication support.
General tasks BIOS Configuration allows you to manage various computer settings that would otherwise be accessible only by pressing F10 at startup and entering Computer Setup. Managing boot options You can use BIOS Configuration to manage various settings for tasks that run when you turn on or restart the computer. To manage boot options: 1. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, click BIOS Configuration. 3.
Enabling and disabling system configuration options NOTE: Some of the items listed below may not be supported by your computer. To enable or disable devices or security options: 1. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, click BIOS Configuration. 3. Type your Computer Setup administrator password at the BIOS administrator password prompt, and then click OK. 4.
● 5. ENWW ◦ SATA Native Mode ◦ Dual Core CPU ◦ Automatic Intel® SpeedStep Functionality Support ◦ Fan Always on While on AC Power ◦ BIOS DMA Data Transfers ◦ Intel or AMD PSAE Execution Disable Built-In Device Options ◦ Embedded WLAN Device Radio ◦ Embedded WWAN Device Radio ◦ Embedded Bluetooth® Device Radio ◦ LAN/WLAN Switching ◦ Wake on LAN from Off Click Apply, and then click OK in the HP ProtectTools window to save your changes and exit.
Advanced tasks Managing HP ProtectTools add-on module settings Some of the features of HP ProtectTools Security Manager can be managed in BIOS Configuration. Enabling and disabling smart card power-on authentication support Enabling this option allows you to use a smart card for user authentication when you turn on the computer. NOTE: To fully enable the power-on authentication feature, you must also configure a smart card using the Java Card Security for HP ProtectTools module.
Enabling and disabling power-on authentication support for Embedded Security Enabling this option allows the system to use the TPM embedded security chip (if available) for user authentication when you turn on the computer. NOTE: To fully enable the power-on authentication feature, you must also configure the TPM embedded security chip using the Embedded Security for HP ProtectTools module. To enable power-on authentication support for embedded security: 1.
Enabling and disabling DriveLock hard drive protection DriveLock is an industry-standard security feature that prevents unauthorized access to the data on ATA hard. DriveLock has been implemented as an extension to Computer Setup. It is only available when hard drives that support the ATA Security command set are detected. DriveLock is intended for HP customers for whom data security is the paramount concern.
Managing Computer Setup passwords You can use BIOS Configuration to set and change the power-on and setup passwords in Computer Setup, and also to manage various password settings. CAUTION: The passwords you set through the “Passwords” page in BIOS Configuration are saved immediately upon clicking the Apply or OK button in the HP ProtectTools window. Be sure that you remember what password you have set, because you will not be able to undo a password setting without supplying the previous password.
3. In the right pane, next to Setup Password, click Set. 4. Type and confirm the password in the Enter Password and Confirm Password boxes. 5. Click OK in the Passwords dialog box. 6. Click Apply, and then click OK in the HP ProtectTools window. Changing the setup password To change the Computer Setup password: 1. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, click BIOS Configuration, and then click Security. 3.
ENWW 3. In the right pane, under Password Options, enable or disable Require password on restart. 4. Click Apply, and then click OK in the HP ProtectTools window.
6 Drive Encryption for HP ProtectTools CAUTION: If you decide to uninstall the Drive Encryption module, you must first decrypt all encrypted drives. If you do not, you will not be able to access the data on encrypted drives unless you have registered with the Drive Encryption recovery service (see “Recovery on page 55”). Reinstalling the Drive Encryption module will not enable you to access the encrypted drives.
Encryption management Encrypting a drive 1. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, click Drive Encryption, and then click Encryption Management. 3. In the right pane, click Activate. The Drive Encryption for HP ProtectTools Wizard opens. 4. Follow the on-screen instructions to activate encryption. NOTE: You will need to specify a diskette, flash storage device, or some other USB-connected storage media on which the recovery information will be stored.
User management Add a user 1. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, click Drive Encryption, and then click User Management. 3. In the right pane, click Add. Click a user name in the User Name list or type a user name in the Username box. Click Next. 4. Type the Windows password for the selected user, and then click Next. 5. Select an authentication method for the new user, and then click Finish. Remove a user 1.
Recovery The following two safety measures are available to you: ● If you forget your password, you cannot access your encrypted drives. You may, however, register with the Drive Encryption recovery service to enable you to access your computer if you forget your password. ● You may back up your Drive Encryption keys on a diskette, flash storage device, or some other USB-connected storage media. Registering with the Drive Encryption recovery service 1.
7 Troubleshooting Credential Manager for ProtectTools Short description Details Solution Using Credential Manager Using TPM authentication, the user is Network Accounts option, only logged into the local computer. a user can select which domain account to log into. When TPM authentication is used, this option is not available. All other authentication methods work properly. Using Credential Manager Single Sign On tools allows user to authenticate other accounts.
Short description Details Solution Windows password from Credential local PC, Credential Manager can only change the Manager, the administrator gets an error password used to log in. logon failure: User account restriction. Credential Manager Single Sign On default settings should be set to prompt to prevent loop. Single Sign On default is set to log users automatically.
Short description Details Solution Credential Manager not being set as primary logon in Windows 2000. During Windows 2000 install, the logon policy is set for manual or auto logon admin. If auto logon is chosen, then the Windows default registry settings sets the default auto admin logon value at 1, and Credential Manager does not override this. This is as designed. Fingerprint logon message appears whether or not fingerprint reader is installed or registered.
Short description Details Solution Restoring Embedded Security causes Credential Manager to fail. Credential Manager fails to register any credentials after the ROM is restored to factory settings. The HP Credential Manager for ProtectTools fails to access the TPM if the ROM was reset to factory settings after the Credential Manager installation. The TPM embedded security chip can be enabled in the BIOS Computer Setup utility, BIOS Configuration for ProtectTools, or HP Client Manager.
Embedded Security for ProtectTools 60 Short description Details Solution Encrypting folders, sub folders, and files on PSD causes error message. If the user copies files and folders to the PSD and tries to encrypt folders/files or folders/subfolders, the Error Applying Attributes message appears. The user can encrypt the same files on the C:\ drive on an extra installed hard drive. This is as designed. Cannot Take Ownership With Another OS In MultiBoot Platform.
Short description Details Solution takes longer when Symantec Antivirus or Norton Antivirus is running. Cannot save emergency recovery archive to removable media. If the user inserts an MMC or SD card when creating the emergency recovery archive path during Embedded Security Initialization, an error message is displayed. This is as designed. Cannot encrypt any data in the Windows 2000 French (France) environment. There is no Encrypt selection when right-clicking a file icon.
Short description Details Solution Microsoft EFS does not fully work in Windows 2000. An administrator can access encrypted information on the system without knowing the correct password. If the administrator enters an incorrect password or cancels the password dialog, the encrypted file will open as if the administrator had entered the correct password. This happens regardless of the security settings used when encrypting the data. This occurs only in the first administrator account on Windows 2000.
Short description Details Solution does not ship 128-MB configurations by default with security modules). EFS User Authentication (password request) times out with access denied. The EFS User Authentication password reopens after clicking OK or returning from standby state after timeout. This is by design—to avoid issues with Microsoft EFS, a 30-second watchdog timer was created to generate the error message).
Short description Details Solution PSD is disabled and cannot be deleted after formatting the hard drive on which the PSD was generated The PSD is disabled and cannot be deleted after formatting the secondary hard drive on which the PSD was generated. The PSD icon is still visible, but the error message drive is not accessible appears when the user attempts to access the PSD.
Short description Details Solution Click here if you want to backup to a temporary archive until the Backup Archive is accessible again. If the Automatic Backup is scheduled for a specific time, however, the backup fails without displaying notice of the failure. Unable to disable Embedded Security State temporarily in Embedded Security GUI. The current 4.0 software was designed for HP Notebook 1.1B implementations, as well as supporting HP Desktop 1.2 implementations.
Miscellaneous Software Impacted— Short description Details Solution HP ProtectTools Security Manager—Warning received: The security application can not be installed until the HP Protect Tools Security Manager is installed. All security applications such as Embedded Security, Java Card, and biometrics are extendable plug-ins for the HP Security Manager interface. Security Manager must be installed before an HP-approved security plug-in can be loaded.
Software Impacted— Short description Details Solution Allow Security Manager to complete services loading message (seen at top of Security Manager window) and all plug-ins listed in left column. To avoid failure, allow a reasonable time for these plug-ins to load. HP ProtectTools * General —Unrestricted access or uncontrolled administrator privileges pose security risk.
Glossary Authentication Process of verifying whether a user is authorized to perform a task, for example, accessing a computer, modifying settings for a particular program, or viewing secured data. Biometric user. Category of authentication credentials that use a physical feature, such as a fingerprint, to identify a BIOS profile Group of BIOS configuration settings that can be saved and applied to other accounts.
Migration A task that allows the management, restoration, and transfer of keys and certificates. Network account Windows user or administrator account, either on a local computer, in a workgroup, or on a domain. NTFS partition NT File System, a method of indexing storage media. This method is standard with Windows Vista and Windows XP. Personal secure drive (PSD) Provides a protected storage area for sensitive information.
Index A access preventing unauthorized 4 accessing HP ProtectTools Security 3 account basic user 30 Credential Manager 13 administrator tasks Credential Manager 23 Java Card 38 advanced tasks BIOS Configuration 46 Credential Manager 23 Embedded Security 33 Java Card 38 B backing up and restoring certification information 33 Embedded Security 33 HP ProtectTools modules 8 Single Sign On data 19 basic user account 30 Basic User Key password changing 32 setting 30 biometric readers 14 BIOS administrator passwo
Embedded Security 34 Embedded Security, permanently 34 Java Card power-on authentication 41 power-on authentication 46 smart card authentication 46 stringent security 50 Drive Encryption for HP ProtectTools adding a user 54 changing a token 54 changing authentication 54 changing encryption 53 decrypting a drive 53 Drive Encryption keys 55 Drive Encryption recovery service 55 encrypting a drive 53 removing a user 54 setting a password 54 DriveLock applications 48 using 48 E Embedded Security for HP ProtectTo
properties application 19 authentication 23 credential 24 W Windows Logon Credential Manager 17 password 7 Windows network account 17 R recovering encrypted data 55 registering application 18 credentials 13 restricting access to sensitive data 4 S security key objectives 4 roles 6 security roles 6 security setup password 7 Single Sign On automatic registration 18 exporting applications 19 manual registration 19 modifying application properties 19 removing applications 19 stringent security 50 T targeted t
