HP ProBook 4325s - Notebook PC Instruction Manual

H P Protec tTo ols Sec urity Softwa re 2 010
Technica l whi te paper
Table of contents
Intr oduc ti o n ......................................................................................................................................... 2
H P Pr ote c tTo ols s e c uri ty so ftw a re overview ............................................................................................. 2
HP security setup wizard....................................................................................................................... 4
User management................................................................................................................................ 5
Backup and restore .............................................................................................................................. 5
Security software components for HP ProtectTools .................................................................................... 6
C redential Manager for HP ProtectTools ............................................................................................. 7
C entra l ma na g e ment for H P Pro te c tToo ls ............................................................................................. 8
Device Access Manager for HP ProtectTools........................................................................................ 9
Drive Encryption for HP ProtectTools ................................................................................................. 11
HP Enha nced Pre-B o ot S e c uri ty ........................................................................................................ 12
Embedded Security for HP ProtectTools ............................................................................................. 14
Face Recognition for HP ProtectTools ................................................................................................ 15
File Sanitizer for HP ProtectTools ...................................................................................................... 16
Computrace® LoJack Pro for HP ProtectTools..................................................................................... 17
Privacy Manager for HP ProtectTools................................................................................................ 17
Smart Card Security for HP ProtectTools............................................................................................ 19
Platform Support................................................................................................................................ 20
Frequently Asked Q uesti ons ................................................................................................................ 21
For more information.......................................................................................................................... 25

2
Introduc ti on
Data security can have a direct impact on the health of your business, and most businesses ra nk
security among their top concerns. Threats to data security are increasing in ma gnitude as well a s
complexity as computers become more mobile and better connected.
HP ha s a rich heritage in enterprise security and started devoting resources to solving the mobile
security problem as soon as the trend emerged. Taking a holistic approach to security, HP designed
HP ProtectTools se c ur i ty s o ftw a r e to provide protection for PC s, a nd to ensure tha t PC s do not
become points of vulnerability that threaten the entire IT infrastructure. HP ProtectTools s ec ur i ty
so ftwa re not only helps protect PC s a nd prevent them from becoming points of vulnerability, i t is also
extensible, easy to use, and centrally manageable.
HP ProtectTools security software overview
Security concerns are inherent with the trend towards mobility, but we cannot let security concerns
slow mobility adoption. Thatis why HP decided to invest heavily in building a stro ng se c uri ty
portfolio. O ur goa l is to offer our customers the most comprehensive standard security features out of
the box of any client PC manufacturer.
HP ProtectTools for Microsoft® W indows® includes a complete suite of features that work together to
protect access to your notebook or desktop computer, protect the data on it, and protect the network
you connect to. HP ProtectTools security software provides security features that help protect against
unauthorized access to the computer, networks, and critical data. Enhanced security functionality is
provided by several HP ProtectTools software modules.
Ta b l e 1 sho w s the three p i l la r s o f secur i ty and HP ProtectTools solutions for each.
Table 1. Three pillars of security and HP ProtectTools integrated solutions for total information protection
A ccess p r ot ect i on
(strong authentication)
Data protection
(data at rest)
Communications protection
(data in motion)
Integrated fingerprint sensor,
facial recognition, and smartcard
reader
Drive Encryption (full volume
encryption standard with every
busi ness no teb ook)
Credential Manager single
si g n-o n fea ture keep s passw or d s
in a vault and automatically enters
them when required
Enhanced pre-boot security
(multiple users, multiple factors)
Device Access Manager prevents
unauthorized copying of files to
removable drives
Privacy Manager allows more
secure communication via instant
messaging (IM ) and email
HP SpareKey can recover users
from lost credentials after initial
user setup
File Sanitizer allows you to
securely delete files from hard
drive so they cannot be recovered
in accordance with the DOD
5220.22-M Supplement
HP ProtectTools can be accessed from a single, easy-to-use software interface. It i s ea si l y a cc essi b l e
from the W indows® task bar, start menu, or desktop gadget. Each plug-in module provides a high
level overview of its purpose. The desktop gadget also indicates the overall security status of your
computer using an easy to understand color code. Detailed help files provide additional information.
HP ProtectTools Security Manager i s a t the heart of the security strategy for business notebooks,
desktops and workstations. This single client console application unifies the security capabilities of HP

3
business notebooks, desktops and workstations under a common architecture and single user interface
(Figure 1).
Fi g u r e 1. HP ProtectTools Security Manager Console
HP ProtectTools is also centrally manageable at the workgroup or enterprise level using either
DigitalPersona Pr o W orkgroup or DigitalPersona Pr o Enterprise management solutions. Organizations
have many security needs, which can create a management challenge. Central management allows
administrators to create role based security policies, decide how users log on, remotely recover users
who have lost their credentials, or revoke user credentials, all from a single control point. HP
ProtectTools with DigitalPersona Pro provides a single management platform for multiple security
applications. Client software for legacy computers allows deployment throughout the entire
organization. Mixed deployments of HP ProtectTools and DigitalPersona Pro client software can be
managed through a single management tool (Figure 2).

4
Fi g u r e 2. HP ProtectTools Administrative Console
The HP ProtectTools Security Manager framework allows you to adapt HP ProtectTools functionality
through add-on modules as your security needs change. This approach ensures that all new HP
ProtectTools security modules introduced over time are highly integrated. Ultimately, you benefit from
security features that are easier to use, manageable, and provide enhanced value by taking
advantage of the multiple security hardware attributes of the personal computing device.
HP ProtectTools Security Manager provides global functionality needed by the installed security
modules, as well as security setup features such as the setup wizard, user management and
security backup and restore.
HPsecurity setup wizard
Setting up security should be fast and easy. Getting started with HP ProtectTools is as easy as swiping
your finger on the HP fingerprint sensor or clicking the desktop gadget. This launches the setup
wizard for HP ProtectTools and guides you through a short list of simple questions after which your
notebook is setup protected. Th e setup wizard is designed to help you secure access to your computer
via a password, smartcard, fingerprint sensor, or face recognition. It allows you to safeguard the
information on your hard drive using data encryption, securing both access and data for total
information protection.
Security levels can be selected individually or in combination. At a minimum, HP recommends
accepting the default setting of W indows level and Pre-Boot Security. For total protection, Drive
Encryption can also be selected. The setup wizard then does the rest.

5
Login methods can also be selected either individually or in combination to achieve multifactor
authentication. The HP ProtectTools Java C ard is a two factor authentica tion method, requiring
both possession and a PIN to authenticate. Passwords, fingerprints, and face recognition are
single factor authentication methods. To achieve multifactor authentication with these methods,
users ca n use them in combina ti o ns such a s fingerprint with pa ssword.
User management
In an HP ProtectTools secured computer, security is built in from the ground up and completely
integrated. There is no longer a separate pre-boot password, a separate drive encryption password
and a separate operating system password. Security is global to the computer and users exist in
W indows as well as in the pre-boot environment.
User ma na gement, accessed from HP ProtectTools Administrative C onsole, is designed to allow y o u to
create and delete ProtectTools users system wide. To ensure that users and security policies are
synchronized between the operating system and the pre-boot environment, users should always be
added and deleted using HP ProtectTools user management.
Backup and r e sto re
G ood information security is not simply about the best technologies, it also requires best practices.
Regular backup of security policies, encryption keys, credentials and certificates is a best practice that
imposes small administrative overhead in the short term, but can result in significant cost savings in
the long run.
HP ProtectTools Backup and Restore is not a user data backup solution. It is designed to backup
security related data such as login credentials and encryption keys. Therefore, the backup and restore
process only takes a few minutes. Backup and Restore is available from the Security Manager by
clicking on the A dvanced link (Figure 3).

6
Fi g u r e 3. HP ProtectTools Security Manager Backup and Restore menu
Using HP ProtectTools backup and restore, users have the flexibility to:
•Perform a full HP ProtectTools backup, which backups data from all installed modules
•Perform a selective backup which allows selected modules to be backed up
•Selective Restore
•Full Restore
S e c ur i ty softwa re components for HP Prote c tTools
The modular architecture of the HP ProtectTools Security Manager enables add-on components to be
selectively installed by the end user or IT administra tor. This provides a high degree of flexibility to
customize HP ProtectTools depending on security needs a nd the underlying ha rdwa re configura tion.
Each add-on element is a self contained security application providing targeted security functionality.
Inte g ra te d i nto H P Pr otectTools Security Manager, these applications form a holistic security solution.
They are specifically designed to work with and complement each other. These elements include:
•C redential Manager for HP ProtectTools
•C entral Ma nagement for HP ProtectTools
•Device Access Manager for HP ProtectTools
•Drive Encryption for HP ProtectTools
•Embedded Security for HP ProtectTools
•Face Recognition for HP ProtectTools

7
•File Sanitizer for HP ProtectTools
•C o mputr a c e® LoJack Pro for HP ProtectTools
oTracking and recovery requires a fee based subscription and setup. For details and
country availability, please visit www.absolute.com/ products/ lojackforlaptops.
•Privacy Manager for HP ProtectTools
G oing forward, as new needs are identified, HP expects to continue to expand its PC se c ur i ty
offerings with additional modules for the HP ProtectTools Security Manager.
C redential Manager for HP ProtectTools
C redential Manager gives users the ability to specify how the different available security technologies
will work together to provide increased protection against unauthorized access to the personal
computer (Figure 4). It i s the g lue tha t b r i ng s the different security technologies together to create a
specified behavior.
Fi g u r e 4. Credential Manager for HP ProtectTools
Through Credential M anager, users can create a unique security behavior that requires their chosen
authentication method, including alternatives to passwords when logging on to Microsoft® W i nd o w s.
Credential Manager also provides single sign-on capability that automatically remembers credentials
for websites, applications, and protected network resources. Credential Manager includes a personal
password vault that makes accessing protected information more secure and convenient.
Key features of Credential Manager include:
•Full integration into HP ProtectTools Security Manager
•Centrally manageable

8
•Support for smart cards (including HP ProtectTools Java C ards), biometric fingerprint security, TPM
embedded security chips, USB tokens, virtua l to kens a nd passwords
•Single sign-on capability manages and protects passwords for websites, applications and network
resources
Table 2 shows the features and benefits of Credential Manager for HP ProtectTools.
Table 2. Credential M anager for HP ProtectTools features and benefits
Fe a t u r e Benefit
Multifactor authentication support Brings together the available (integrated and add-o n) securi ty
technologies on a PC into a cohesive and unique behavior that utilizes
these technologies to authenticate users based on user preferences.
Microsoft W indows logon
capability
Enables the use of any supported security technology to logon to
W indows providing a more secure and convenient alternative to
password authentication.
Single sign-o n ma na g es user
credentials fo r w eb si tes,
applications and protected
network resources
Users no longer need to remember multiple passwords for protected
websites, applications and network resources.
Single sign-
on works with multifactor authentication capabilities to add
additional protection requiring users to re-authenticate when accessing
particularly sensitive data.
Registering new websites, applications or network logon dialogues is
si mple, making it easy for users to begin taking advantage of the
added convenience and security.
Central management for HP ProtectTools
Central Management for HP ProtectTools is developed in partnership with DigitalPersona, and is
available in two configurations: DigitalPer so n a Pr o Enterprise and DigitalPersona Pro W orkgroup.
Central Management allows administrators to create and deploy role based policies, revoke a ccess
and recover users w i th l o st cr ed enti a l s. DigitalPersona Pro Enterprise is designed for small to medium
b usi nesses a nd enter p r i ses tha t use A c ti ve Di recto r y. It a l l ow s a d mi ni str a to r s to leverage Active
Directory for maximum scalability. Figure 5 shows the key features of HP ProtectTools with
DigitalPersona Pro. DigitalPersona Pro W orkgroup makes central management accessible to smaller
organizations without Active Directory through simplicity of design and deployment, and attractive
per seat cost. DigitalPersona Pro W orkgroup i s a self -contained solution with no special server
hardware requirements. It makes security easy to deploy by allowing administrators to create role
based policies and implement them within the workgroup. Security keys are managed centrally and
allow the administrator to recover users with lost credentials. DigitalPersona Pro W orkgroup can be
accessed directly from HP ProtectTools and can be deployed for up to five users with no per seat cost.

9
Fi g u r e 5. Key features of HP ProtectTools with DigitalPersona Pro
DigitalPersona Pro protects applications and data by simplifying security controls for multiple
applications. It provides for strong authentication to boost accountability and deter fraud. It simplifies
auditing with comprehensive logging. By consolidating point management tools into one console,
organizations are able to automate processes and reduce costs from passwords and provisioning.
Table 3 sho w s the major features of HP ProtectTools with DigitalPersona Pro.
Table 3. HP ProtectTools with DigitalPersona Pro central management features and benefits
Fe a t u r e Benefit
Support for other PCs Deploy HP ProtectTools-compatible client on legacy or non-H P PC s
Security policy synchronization Keep secur i ty p oli ci es a nd setti ng s the same acr oss PC s
Strong authentication Combine passwords, smart cards, fingerprints, face recognition
Access recovery Unlock pre-boot, disk encryption and PCs for forgotten passwords or
smart cards
Single Sign-on (SSO ) Enable stronger security for password-based enterprise and web
applications
Secure communications Sign or encrypt email and documents quickly and easily
Audit login Simplify forensics and compliance
Device Access Manager for HP ProtectTools
Device Access M anager for HP ProtectTools speaks to HP’s strong commitment to security and its
ability to respond to customer needs with innovative solutions. A common assumption with today’s PC
usage model is that users who are authorized to log on to a personal computer and access sensitive
data are also able to copy that information. In reality, this is not always the case. Companies may
need to allow users to view sensitive data, but restrict their ability to copy that data. Device Access

10
Manager for HP ProtectTools solves that problem. In doing so, i t enables a new usage model for
personal computing devices.
Device Access Manager for HP ProtectTools has two configuration options: Simple C onfiguration
(Figure 6) and Advanced Configuration.
Fi g u r e 6. Device Access Manager for HP ProtectTools Administrative Console
Simple Configuration
The Simple Configuration option is a collection of common options that can be configured with a
single selection. These options include:
•Limit access to all Removable Media
•Li mi t a c c e ss to a l l D V D / C D -RO M Drives
•Limit access to all Bluetooth devices
•Limit access to all 1394 devices
Device Cla ss Configuration
The Device C lass C onfiguration option is where the true power of Device Access Manager lies. Using
Device C lass C onfiguration, policies can easily be created to implement complex security
requirements as well as complex business processes.
Using Device C la ss C onfiguration, IT Managers can create device and peripheral usage profiles
ba sed on the individual user, user type, individual device or device class. Device Access Manager for
HP ProtectTools allows all devices for all users by defa ult. This ensures a normal experience for users
who don’t require device control. If Device C ontrol is needed however, Device Access Manager
creates a black list of devices for individual users, or a class of users. Through Device C lass