HP Brio BA200 Bedienungsanleitung
HP ProtectTools 2000
Smart Card Kit
User’s Guide
Notice
The information contained in this document is subject to change
without notice.
Hewlett-Packard makes no warranty of any kind with regard to this
material, including, but not limited to, the implied warranties of
merchantability and fitness for a particular purpose. Hewlett-Packard
shall not be liable for errors contained herein or for incidental or
consequential damages in connection with the furnishing, performance,
or use of this material.
This document contains proprietary information that is protected by
copyright. All rights are reserved. No part of this document may be
photocopied, reproduced, or translated to another language without the
prior written consent of Hewlett-Packard Company.
AdobeTM and AcrobatTM are trademarks of Adobe Systems Incorporated.
Microsoft®,MS
®, MS-DOS®, Windows®and Windows NT®are
registered trademarks of Microsoft Corporation in the United States and
other countries.
Hewlett-Packard France
Commercial Computing Division
38053 Grenoble Cedex 9
France
2000 Hewlett-Packard Company
iii
User’s Guide
This manual is intended for both the PC administrator and the PC user.
It describes how to:
•Install and deploy HP ProtectTools 2000 software
•Set up HP ProtectTools 2000 for use
•Manage security settings
•Manage smart cards
•Troubleshoot problems
•Find out where to get more information and support.
HP Custom Security Services
HP offers security consulting services and customized security
solutions, including the use of this product and other HP security
products. For more information, please contact your HP sales
representative.
Conventions Used in this Manual
This document describes the installation of software on a range of
Microsoft operating systems. Whenever some information applies only
to one or more operating systems, a small tab appears alongside to
indicate the operating system(s) concerned. See the following
example:
1This indicates that step 1 applies only to PCs running Windows NT
4.0 or Windows 2000. You can ignore this step if your PC is running
a different operating system.
When no such symbol is shown alongside a step or section in the
manual, the information concerns all operating systems:
2This indicates that step 2 applies to any system running one of the
supported operating systems: Windows 95, Windows 98, Windows
NT 4.0 or Windows 2000.
Windows NT 4.0
Windows 2000
iv
Important Information
Folder Encryption (Windows 95, 98 and NT 4.0 Only)
You are about to install File Encryption software. This software enables
the use of an advanced security feature but it implies at the same time
theriskoflossofaccesstoyourconfidentialfiles.Toreducesucha
risk, HP strongly recommends you prepare in advance a recovery smart
card and/or recovery file that will still give you access to such files in
case you lose your smart card and/or password.
ATTENTION: in case of loss of your smart card and/or password you
may not be able to recover access to those encrypted files.
THE SOFTWARE IS PROVIDED "AS IS" WITHOUT ANY WARRANTIES
OF ANY KIND INCLUDING WARRANTIES OF MERCHANTABILITY,
FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT
OF INTELLECTUAL PROPERTY. IN NO EVENT WILL HP BE LIABLE
FOR ANY DAMAGES WHATSOEVER (INCLUDING, WITHOUT
LIMITATION, THOSE RESULTING FROM LOST PROFITS, LOST DATA
OR BUSINESS INTERRUPTION) ARISING OUT OF THE USE,
INABILITY TO USE, OR THE RESULTS OF USE OF THIS SOFTWARE,
WHETHER BASED ON WARRANTY, CONTRACT, TORT OR ANY
OTHER LEGAL THEORY AND WHETHER OR NOT ADVISED OF THE
POSSIBILITY OF SUCH DAMAGES. APPLICABLE LAW MAY NOT
ALLOW THE EXCLUSION OR LIMITATION OF INCIDENTAL OR
CONSEQUENTIAL DAMAGES, SO THE ABOVE LIMITATION OR
EXCLUSION MAY NOT APPLY TO YOU.
v
Import/Export Regulations
This computer system includes HP ProtectTools 2000. HP ProtectTools
2000 is made of a smart card (and associated reader and software
driver) and HP Encryption Smart Card Security System software with
the following encryption capabilities.
•40bit symmetrical encryption algorithm, used for data encryption
(confidentiality) (non-US version);
•128bit symmetrical encryption algorithm, used for data encryption
(confidentiality) (US version);
•512/56bit RSA private key algorithm, used for digital signature (non-
US version);
•1024/128bit RSA private key algorithm, used for digital signature
(US version).
Export of this product is not allowed to the following countries:
Afghanistan, Angola, Cuba, Iraq, Iran, Lybia, Macedonia, Montenegro,
Mozambique, North Korea, Pakistan, Serbia, Slovenia, Somalia, Sudan,
Syria. Export of this product to other countries may be subject to
regulations. For instructions on how to export this product, and
according to the country in which you have purchased this equipment,
please contact: in France: SCSSI (Service Central de la Sécuritédes
Systèmes d'Information, www.scssi.gouv.fr); in Germany: BAFA
(Bundesausfuhramt, Exportkontrolle, www.bafa.de); in the United-
Kingdom: DTI (Department of Trade and Industry, www.dti.gov.uk), in
the USA: Department of Commerce (Export Administration
Regulations, www.bxa.doc.gov).
vi
Contents
English vii
1 Introduction to HP ProtectTools 2000
Introduction.............................................. 12
WhatisaSmartCard?........................................ 12
SmartCardKitContents...................................... 12
GemSAFESmartCards....................................... 13
PINNumbers ............................................... 13
BeforeYouBegin.......................................... 15
SystemRequirements(HPDesktopPCs) ........................ 15
SystemRequirements(OmniBookNotebookPCs)................. 15
Software Compatibility for PCs Running Windows NT 4.0 . . . . . . . . . . . 16
Features of HP ProtectTools 2000 . . . . . . . . . . .................... 17
Contents of the HP ProtectTools 2000 CD-ROM ................ 18
2 Installing HP ProtectTools 2000 Software
BeforeInstallingtheSoftware............................... 22
SoftwareInstallationProcedure............................. 23
Preparing a PC Running Windows NT 4.0 (HP Desktop PCs) . . . . . . . . 23
Preparing a PC Running Windows NT 4.0 (HP Notebook PCs) . . . . . . . 24
Installing the Drivers, Software and Reader (HP Desktop PCs) . . . . . . . 25
Installing the Drivers, Software and Reader (HP Notebook PCs). . . . . . 27
InstallingOptionalItems...................................... 29
Deploying ProtectTools 2000 Using a Network ................. 31
RemoteInstallationUsingaDeploymentTool..................... 31
Automatic Installation of ProtectTools 2000 . . . . . . . . . ............. 31
Uninstalling HP ProtectTools 2000 ........................... 33
viii English
UninstallingHPNTLock...................................... 33
UninstallingHPSoftPowerDown .............................. 34
3 Setting up HP ProtectTools 2000
PreparingaSmartCardforUse:Overview.................... 36
InitializingaSmartCard ................................... 37
Updating the PC’sBIOS(OmniBooksOnly)................... 38
EnablingBIOSSmartCardSecurity(OmniBooksOnly) ........ 39
SettingUpaBIOSUserPasswordCard.......................... 39
SettingUpFolderEncryptiononYourPC .................... 40
CreatingaRecoveryFile................................... 41
4 Managing Security and Smart Cards
TheHPSmartCardSecurityManager........................ 44
For Windows NT 4.0 and Windows 2000 Users . . . . . . . . . . . . ........ 44
ForWindows95andWindows98Users ......................... 45
Running the HP Smart Card Security Manager . . . . . . . . . . . . ........ 46
AccessingtheOnlineHelp .................................... 46
ManagingSecurity:ConfigurationSettings.................... 47
Smart Card–AllowInitializationOption.......................... 47
BeeponSmartCardRemovalOption ........................... 48
Win NT–LogonPoliciesOptions................................ 49
Win NT–LogonTextConfigurationOptions....................... 54
Win NT–LogonPowerManagementOptions...................... 54
English ix
AccountPolicies............................................. 55
BIOS Password Options (OmniBooks Only) . . . . . . . . . ............. 57
Win95/98Options ........................................... 58
CustomizingSecurityForYourInstalledBaseofPCs............... 59
ManagingSmartCards ..................................... 61
Using Smart Cards under Windows NT and Windows 2000 . . . . . . . . . . 62
InitializingFurtherSmartCards ............................... 63
Changing a Smart Card’sPIN .................................. 63
RestoringaSmartCardfromaRecoveryFile ..................... 64
Restoring a Smart Card Without the Recovery File . . . . . . . . . . . . . . . . . 65
Adding an Account to a Smart Card (Windows NT/Windows 2000). . . . 65
Removing an Account (Windows NT/Windows 2000) . . . . . . . . . . . . . . . 66
Changing an Account Password (Windows NT/Windows 2000) . . . . . . . 66
HPTopTools.............................................. 67
5 Troubleshooting
SmartCardTroubleshootingHelpZone....................... 70
IfYouDisconnecttheSmartCardReader ........................ 70
IfthePCFreezesAfterYouRestartIt ........................... 70
If the Smart Card’sPasswordisNotUpToDate ................... 70
WaitforService ............................................. 71
TroubleshootingTable........................................ 72
HPSmartCardDiagnosticsTool............................. 75
DiagnosticsOnlineHelp....................................... 75
UsingHPSmartCardDiagnostics .............................. 75
Documentation,HelpandSupport........................... 77
xEnglish
Andere Handbücher für Brio BA200
4
Dieses Handbuch passt für folgende Modelle
6
Inhaltsverzeichnis
Andere HP Software Handbücher
HP
HP vc4825T - Thin Client Service-Handbuch
HP
HP Rx2620-2 - Integrity - 0 MB RAM Bedienungsanleitung
HP
HP Configuring Arrays Bedienungsanleitung
HP
HP Kayak XU700 Bedienungsanleitung
HP
HP StorageWorks 2/16 - SAN Switch Bedienungsanleitung
HP
HP CN088A - Serif PosterDesigner Pro Bedienungsanleitung
HP
HP 4320t - Mobile Thin Client Montageanleitung
HP
HP Media Center m1000 - Desktop PC Kurzanleitung
HP
HP NC373m - PCI Express Dual Port Multifunction Gigabit Server... Bedienungsanleitung
HP
HP BladeSystem Dual NC370i - Multifunction Network... Bedienungsanleitung
HP
HP T6553 D45 Bedienungsanleitung
HP
HP 407484-B21 - ProLiant Essentials Accelerated... Referenzhandbuch
HP
HP LeftHand P4000 - SAN Solutions Bedienungsanleitung
HP
HP DDL D40 Bedienungsanleitung
HP
HP Surestore Tape Library Model 10/180 Bedienungsanleitung
HP
HP AE370A - Brocade 4Gb SAN Switch 4/12 Service-Handbuch
HP
HP 742n - Pavilion - 512 MB RAM Montage- und Bedienungsanleitung
HP
HP BAAD0010HBK-NHSN Bedienungsanleitung
HP
HP JetCAPS Bedienungsanleitung
HP
HP Color LaserJet CP3505 Series Gebrauchs- und Pflegehandbuch
Beliebte Software Handbücher anderer Marken
COMPRO
COMPRO COMPROFM Bedienungsanleitung
Muratec
Muratec OFFICEBRIDGE ONLINE Bedienungsanleitung
Oracle
Oracle Contact Center Anywhere 8.1 Bedienungsanleitung
Adobe
Adobe 65007312 - Photoshop Lightroom Handbuch
Avaya
Avaya NULL One-X for RIM Blackberry Bedienungsanleitung
PS Audio
PS Audio PowerPlay Betriebsanleitung
Brady
Brady LOCKOUT PRO 3.0 Service-Handbuch
Avaya
Avaya Interaction Center Bedienungsanleitung
Texas Instruments
Texas Instruments TI-83 Plus Silver Edition Handbuch
Novell
Novell GROUPWISE 8 - INTERNET AGENT Bedienungsanleitung
Oracle
Oracle Application 9i Bedienungsanleitung
Acer
Acer RDM Bedienungsanleitung
Canon
Canon Vixia HF21 Bedienungsanleitung
Canon
Canon ZR950 Bedienungsanleitung
Samsung
Samsung Auto Backup Bedienungsanleitung
Polycom
Polycom Vortex EF2201 Montage- und Bedienungsanleitung
Brocade Communications Systems
Brocade Communications Systems Brocade 8/12c Bedienungsanleitung
Novell
Novell SP2 - S Bedienungsanleitung