HP ProBook 4325s - Notebook PC Bedienungsanleitung

H P Protec tTo ols Sec urity Softwa re 2 010

Technica l whi te paper

Table of contents

Intr oduc ti o n ......................................................................................................................................... 2

H P Pr ote c tTo ols s e c uri ty so ftw a re overview ............................................................................................. 2

HP security setup wizard....................................................................................................................... 4

User management................................................................................................................................ 5

Backup and restore .............................................................................................................................. 5

Security software components for HP ProtectTools .................................................................................... 6

C redential Manager for HP ProtectTools ............................................................................................. 7

C entra l ma na g e ment for H P Pro te c tToo ls ............................................................................................. 8

Device Access Manager for HP ProtectTools........................................................................................ 9

Drive Encryption for HP ProtectTools ................................................................................................. 11

HP Enha nced Pre-B o ot S e c uri ty ........................................................................................................ 12

Embedded Security for HP ProtectTools ............................................................................................. 14

Face Recognition for HP ProtectTools ................................................................................................ 15

File Sanitizer for HP ProtectTools ...................................................................................................... 16

Computrace® LoJack Pro for HP ProtectTools..................................................................................... 17

Privacy Manager for HP ProtectTools................................................................................................ 17

Smart Card Security for HP ProtectTools............................................................................................ 19

Platform Support................................................................................................................................ 20

Frequently Asked Q uesti ons ................................................................................................................ 21

For more information.......................................................................................................................... 25

Introduc ti on

Data security can have a direct impact on the health of your business, and most businesses ra nk

security among their top concerns. Threats to data security are increasing in ma gnitude as well a s

complexity as computers become more mobile and better connected.

HP ha s a rich heritage in enterprise security and started devoting resources to solving the mobile

security problem as soon as the trend emerged. Taking a holistic approach to security, HP designed

HP ProtectTools se c ur i ty s o ftw a r e to provide protection for PC s, a nd to ensure tha t PC s do not

become points of vulnerability that threaten the entire IT infrastructure. HP ProtectTools s ec ur i ty

so ftwa re not only helps protect PC s a nd prevent them from becoming points of vulnerability, i t is also

extensible, easy to use, and centrally manageable.

HP ProtectTools security software overview

Security concerns are inherent with the trend towards mobility, but we cannot let security concerns

slow mobility adoption. Thatis why HP decided to invest heavily in building a stro ng se c uri ty

portfolio. O ur goa l is to offer our customers the most comprehensive standard security features out of

the box of any client PC manufacturer.

HP ProtectTools for Microsoft® W indows® includes a complete suite of features that work together to

protect access to your notebook or desktop computer, protect the data on it, and protect the network

you connect to. HP ProtectTools security software provides security features that help protect against

unauthorized access to the computer, networks, and critical data. Enhanced security functionality is

provided by several HP ProtectTools software modules.

Ta b l e 1 sho w s the three p i l la r s o f secur i ty and HP ProtectTools solutions for each.

Table 1. Three pillars of security and HP ProtectTools integrated solutions for total information protection

A ccess p r ot ect i on

(strong authentication)

Data protection

(data at rest)

Communications protection

(data in motion)

Integrated fingerprint sensor,

facial recognition, and smartcard

reader

Drive Encryption (full volume

encryption standard with every

busi ness no teb ook)

Credential Manager single

si g n-o n fea ture keep s passw or d s

in a vault and automatically enters

them when required

Enhanced pre-boot security

(multiple users, multiple factors)

Device Access Manager prevents

unauthorized copying of files to

removable drives

Privacy Manager allows more

secure communication via instant

messaging (IM ) and email

HP SpareKey can recover users

from lost credentials after initial

user setup

File Sanitizer allows you to

securely delete files from hard

drive so they cannot be recovered

in accordance with the DOD

5220.22-M Supplement

HP ProtectTools can be accessed from a single, easy-to-use software interface. It i s ea si l y a cc essi b l e

from the W indows® task bar, start menu, or desktop gadget. Each plug-in module provides a high

level overview of its purpose. The desktop gadget also indicates the overall security status of your

computer using an easy to understand color code. Detailed help files provide additional information.

HP ProtectTools Security Manager i s a t the heart of the security strategy for business notebooks,

desktops and workstations. This single client console application unifies the security capabilities of HP

business notebooks, desktops and workstations under a common architecture and single user interface

(Figure 1).

Fi g u r e 1. HP ProtectTools Security Manager Console

HP ProtectTools is also centrally manageable at the workgroup or enterprise level using either

DigitalPersona Pr o W orkgroup or DigitalPersona Pr o Enterprise management solutions. Organizations

have many security needs, which can create a management challenge. Central management allows

administrators to create role based security policies, decide how users log on, remotely recover users

who have lost their credentials, or revoke user credentials, all from a single control point. HP

ProtectTools with DigitalPersona Pro provides a single management platform for multiple security

applications. Client software for legacy computers allows deployment throughout the entire

organization. Mixed deployments of HP ProtectTools and DigitalPersona Pro client software can be

managed through a single management tool (Figure 2).

Fi g u r e 2. HP ProtectTools Administrative Console

The HP ProtectTools Security Manager framework allows you to adapt HP ProtectTools functionality

through add-on modules as your security needs change. This approach ensures that all new HP

ProtectTools security modules introduced over time are highly integrated. Ultimately, you benefit from

security features that are easier to use, manageable, and provide enhanced value by taking

advantage of the multiple security hardware attributes of the personal computing device.

HP ProtectTools Security Manager provides global functionality needed by the installed security

modules, as well as security setup features such as the setup wizard, user management and

security backup and restore.

HPsecurity setup wizard

Setting up security should be fast and easy. Getting started with HP ProtectTools is as easy as swiping

your finger on the HP fingerprint sensor or clicking the desktop gadget. This launches the setup

wizard for HP ProtectTools and guides you through a short list of simple questions after which your

notebook is setup protected. Th e setup wizard is designed to help you secure access to your computer

via a password, smartcard, fingerprint sensor, or face recognition. It allows you to safeguard the

information on your hard drive using data encryption, securing both access and data for total

information protection.

Security levels can be selected individually or in combination. At a minimum, HP recommends

accepting the default setting of W indows level and Pre-Boot Security. For total protection, Drive

Encryption can also be selected. The setup wizard then does the rest.

authentication. The HP ProtectTools Java C ard is a two factor authentica tion method, requiring

both possession and a PIN to authenticate. Passwords, fingerprints, and face recognition are

single factor authentication methods. To achieve multifactor authentication with these methods,

users ca n use them in combina ti o ns such a s fingerprint with pa ssword.

User management

In an HP ProtectTools secured computer, security is built in from the ground up and completely

integrated. There is no longer a separate pre-boot password, a separate drive encryption password

and a separate operating system password. Security is global to the computer and users exist in

W indows as well as in the pre-boot environment.

User ma na gement, accessed from HP ProtectTools Administrative C onsole, is designed to allow y o u to

create and delete ProtectTools users system wide. To ensure that users and security policies are

synchronized between the operating system and the pre-boot environment, users should always be

added and deleted using HP ProtectTools user management.

Backup and r e sto re

G ood information security is not simply about the best technologies, it also requires best practices.

Regular backup of security policies, encryption keys, credentials and certificates is a best practice that

imposes small administrative overhead in the short term, but can result in significant cost savings in

the long run.

HP ProtectTools Backup and Restore is not a user data backup solution. It is designed to backup

security related data such as login credentials and encryption keys. Therefore, the backup and restore

process only takes a few minutes. Backup and Restore is available from the Security Manager by

clicking on the A dvanced link (Figure 3).

Fi g u r e 3. HP ProtectTools Security Manager Backup and Restore menu

Using HP ProtectTools backup and restore, users have the flexibility to:

•Perform a full HP ProtectTools backup, which backups data from all installed modules

•Perform a selective backup which allows selected modules to be backed up

•Selective Restore

•Full Restore

S e c ur i ty softwa re components for HP Prote c tTools

The modular architecture of the HP ProtectTools Security Manager enables add-on components to be

selectively installed by the end user or IT administra tor. This provides a high degree of flexibility to

customize HP ProtectTools depending on security needs a nd the underlying ha rdwa re configura tion.

Each add-on element is a self contained security application providing targeted security functionality.

Inte g ra te d i nto H P Pr otectTools Security Manager, these applications form a holistic security solution.

They are specifically designed to work with and complement each other. These elements include:

•C redential Manager for HP ProtectTools

•C entral Ma nagement for HP ProtectTools

•Device Access Manager for HP ProtectTools

•Drive Encryption for HP ProtectTools

•Embedded Security for HP ProtectTools

•Face Recognition for HP ProtectTools

•File Sanitizer for HP ProtectTools

•C o mputr a c e® LoJack Pro for HP ProtectTools

oTracking and recovery requires a fee based subscription and setup. For details and

country availability, please visit www.absolute.com/ products/ lojackforlaptops.

•Privacy Manager for HP ProtectTools

G oing forward, as new needs are identified, HP expects to continue to expand its PC se c ur i ty

offerings with additional modules for the HP ProtectTools Security Manager.

C redential Manager for HP ProtectTools

C redential Manager gives users the ability to specify how the different available security technologies

will work together to provide increased protection against unauthorized access to the personal

computer (Figure 4). It i s the g lue tha t b r i ng s the different security technologies together to create a

specified behavior.

Fi g u r e 4. Credential Manager for HP ProtectTools

Through Credential M anager, users can create a unique security behavior that requires their chosen

authentication method, including alternatives to passwords when logging on to Microsoft® W i nd o w s.

Credential Manager also provides single sign-on capability that automatically remembers credentials

for websites, applications, and protected network resources. Credential Manager includes a personal

password vault that makes accessing protected information more secure and convenient.

Key features of Credential Manager include:

•Full integration into HP ProtectTools Security Manager

•Centrally manageable

•Support for smart cards (including HP ProtectTools Java C ards), biometric fingerprint security, TPM

embedded security chips, USB tokens, virtua l to kens a nd passwords

•Single sign-on capability manages and protects passwords for websites, applications and network

resources

Table 2 shows the features and benefits of Credential Manager for HP ProtectTools.

Table 2. Credential M anager for HP ProtectTools features and benefits

Fe a t u r e Benefit

Multifactor authentication support Brings together the available (integrated and add-o n) securi ty

technologies on a PC into a cohesive and unique behavior that utilizes

these technologies to authenticate users based on user preferences.

Microsoft W indows logon

capability

Enables the use of any supported security technology to logon to

W indows providing a more secure and convenient alternative to

password authentication.

Single sign-o n ma na g es user

credentials fo r w eb si tes,

applications and protected

network resources

Users no longer need to remember multiple passwords for protected

websites, applications and network resources.

Single sign-

on works with multifactor authentication capabilities to add

additional protection requiring users to re-authenticate when accessing

particularly sensitive data.

Registering new websites, applications or network logon dialogues is

si mple, making it easy for users to begin taking advantage of the

added convenience and security.

Central management for HP ProtectTools

Central Management for HP ProtectTools is developed in partnership with DigitalPersona, and is

available in two configurations: DigitalPer so n a Pr o Enterprise and DigitalPersona Pro W orkgroup.

Central Management allows administrators to create and deploy role based policies, revoke a ccess

and recover users w i th l o st cr ed enti a l s. DigitalPersona Pro Enterprise is designed for small to medium

b usi nesses a nd enter p r i ses tha t use A c ti ve Di recto r y. It a l l ow s a d mi ni str a to r s to leverage Active

Directory for maximum scalability. Figure 5 shows the key features of HP ProtectTools with

DigitalPersona Pro. DigitalPersona Pro W orkgroup makes central management accessible to smaller

organizations without Active Directory through simplicity of design and deployment, and attractive

per seat cost. DigitalPersona Pro W orkgroup i s a self -contained solution with no special server

hardware requirements. It makes security easy to deploy by allowing administrators to create role

based policies and implement them within the workgroup. Security keys are managed centrally and

allow the administrator to recover users with lost credentials. DigitalPersona Pro W orkgroup can be

accessed directly from HP ProtectTools and can be deployed for up to five users with no per seat cost.

Fi g u r e 5. Key features of HP ProtectTools with DigitalPersona Pro

DigitalPersona Pro protects applications and data by simplifying security controls for multiple

applications. It provides for strong authentication to boost accountability and deter fraud. It simplifies

auditing with comprehensive logging. By consolidating point management tools into one console,

organizations are able to automate processes and reduce costs from passwords and provisioning.

Table 3 sho w s the major features of HP ProtectTools with DigitalPersona Pro.

Table 3. HP ProtectTools with DigitalPersona Pro central management features and benefits

Fe a t u r e Benefit

Support for other PCs Deploy HP ProtectTools-compatible client on legacy or non-H P PC s

Security policy synchronization Keep secur i ty p oli ci es a nd setti ng s the same acr oss PC s

Strong authentication Combine passwords, smart cards, fingerprints, face recognition

Access recovery Unlock pre-boot, disk encryption and PCs for forgotten passwords or

smart cards

Single Sign-on (SSO ) Enable stronger security for password-based enterprise and web

applications

Secure communications Sign or encrypt email and documents quickly and easily

Audit login Simplify forensics and compliance

Device Access Manager for HP ProtectTools

Device Access M anager for HP ProtectTools speaks to HP’s strong commitment to security and its

ability to respond to customer needs with innovative solutions. A common assumption with today’s PC

usage model is that users who are authorized to log on to a personal computer and access sensitive

data are also able to copy that information. In reality, this is not always the case. Companies may

need to allow users to view sensitive data, but restrict their ability to copy that data. Device Access

Manager for HP ProtectTools solves that problem. In doing so, i t enables a new usage model for

personal computing devices.

Device Access Manager for HP ProtectTools has two configuration options: Simple C onfiguration

(Figure 6) and Advanced Configuration.

Fi g u r e 6. Device Access Manager for HP ProtectTools Administrative Console

Simple Configuration

The Simple Configuration option is a collection of common options that can be configured with a

single selection. These options include:

•Limit access to all Removable Media

•Li mi t a c c e ss to a l l D V D / C D -RO M Drives

•Limit access to all Bluetooth devices

•Limit access to all 1394 devices

Device Cla ss Configuration

The Device C lass C onfiguration option is where the true power of Device Access Manager lies. Using

Device C lass C onfiguration, policies can easily be created to implement complex security

requirements as well as complex business processes.

Using Device C la ss C onfiguration, IT Managers can create device and peripheral usage profiles

ba sed on the individual user, user type, individual device or device class. Device Access Manager for

HP ProtectTools allows all devices for all users by defa ult. This ensures a normal experience for users

who don’t require device control. If Device C ontrol is needed however, Device Access Manager

creates a black list of devices for individual users, or a class of users. Through Device C lass

Andere Handbücher für ProBook 4325s - Notebook PC

Dieses Handbuch passt für folgende Modelle

Inhaltsverzeichnis

Andere HP Software Handbücher

HP Compaq NW8000 Bedienungsanleitung

HP AJ765A - StorageWorks RDX Removable Disk Backup... Bedienungsanleitung

HP C7791C - DesignJet 130 Color Inkjet Printer Konfigurationshandbuch

HP T1936AA - Digital Sending Software Gebrauchs- und Pflegehandbuch

HP StorageWorks 1000 - Modular Smart Array Bedienungsanleitung

HP MAILbus 400 Bedienungsanleitung

HP C7791C - DesignJet 130 Color Inkjet Printer Konfigurationshandbuch

HP HP Integrated Lights-Out Bedienungsanleitung

HP e-diagtools 4.0 Bedienungsanleitung

HP Compaq Elite 8200 AIO Bedienungsanleitung

HP Configuring Arrays Bedienungsanleitung

HP Rx2620-2 - Integrity - 0 MB RAM Bedienungsanleitung

HP NC373m - PCI Express Dual Port Multifunction Gigabit Server... Bedienungsanleitung

HP 4320t - Mobile Thin Client Montageanleitung

HP C7791C - DesignJet 130 Color Inkjet Printer Konfigurationshandbuch

HP Bc1500 - BladeSystem - Blade PC Bedienungsanleitung

HP BB118BV - StorageWorks Data Protector Express... Bedienungsanleitung

HP Integrity rx1620 Bedienungsanleitung

HP LeftHand P4000 - SAN Solutions Bedienungsanleitung

HP C8000 - Workstation - 0 MB RAM Bedienungsanleitung

HP Rx2620-2 - Integrity - 0 MB RAM Bedienungsanleitung

HP CN088A - Serif PosterDesigner Pro Betriebsanleitung

HP HPE XP P9500 Sicherheitsleitfaden

Beliebte Software Handbücher anderer Marken

COMPRO

COMPRO COMPROFM Bedienungsanleitung

Muratec

Muratec OFFICEBRIDGE ONLINE Bedienungsanleitung

Oracle

Oracle Contact Center Anywhere 8.1 Bedienungsanleitung

Adobe

Adobe 65007312 - Photoshop Lightroom Handbuch

Avaya

Avaya NULL One-X for RIM Blackberry Bedienungsanleitung

PS Audio

PS Audio PowerPlay Betriebsanleitung

Brady

Brady LOCKOUT PRO 3.0 Service-Handbuch

Avaya

Avaya Interaction Center Bedienungsanleitung

Texas Instruments

Texas Instruments TI-83 Plus Silver Edition Handbuch

Novell

Novell GROUPWISE 8 - INTERNET AGENT Bedienungsanleitung

Oracle

Oracle Application 9i Bedienungsanleitung

Acer

Acer RDM Bedienungsanleitung

Canon

Canon Vixia HF21 Bedienungsanleitung

Canon

Canon ZR950 Bedienungsanleitung

Samsung

Samsung Auto Backup Bedienungsanleitung

Polycom

Polycom Vortex EF2201 Montage- und Bedienungsanleitung

Brocade Communications Systems

Brocade Communications Systems Brocade 8/12c Bedienungsanleitung

Novell

Novell SP2 - S Bedienungsanleitung