HP Compaq NC4010 Features Manual

Protecttools firmware security features in hp business notebooks
Hide thumbs Also See for Compaq NC4010:
HP ProtectTools
Firmware security features in HP business notebooks
Embedded Security Overview ............................................................................................................... 2
Basics of Protection .............................................................................................................................. 2
Protecting against unauthorized access - user authentication .................................................................... 3
Pre-boot Authentication on HP Notebooks............................................................................................... 3
Power-on Password authentication overview........................................................................................ 4
Enabling Power-on password ......................................................................................................... 4
Smart card authentication overview.................................................................................................... 4
Enabling smart card pre-boot authentication .................................................................................... 4
Embedded security chip pre-boot authentication overview..................................................................... 5
Enabling embedded security chip pre-boot user authentication .............................................................. 5
Protecting local storage ........................................................................................................................ 5
DriveLock hard drive protection ......................................................................................................... 6
TPM enhanced DriveLock .................................................................................................................. 6
Securing Devices ................................................................................................................................. 6
Boot Options ................................................................................................................................... 7
Device Control................................................................................................................................. 7
Accessing BIOS Security Features from Microsoft Windows ...................................................................... 7
Working with BIOS Configuration Profiles......................................................................................... 10
Enabling Profiles ............................................................................................................................ 10
Appendix ......................................................................................................................................... 11
For more information.......................................................................................................................... 12
Table of Contents
loading

Summary of Contents for HP Compaq NC4010

  • Page 1: Table Of Contents

    HP ProtectTools Firmware security features in HP business notebooks Embedded Security Overview ... 2 Basics of Protection ... 2 Protecting against unauthorized access – user authentication ... 3 Pre-boot Authentication on HP Notebooks... 3 Power-on Password authentication overview... 4 Enabling Power-on password ... 4 Smart card authentication overview...
  • Page 2: Embedded Security Overview

    While these objectives can be achieved by using functionality at the OS level, HP provides embedded security features that enhance user authentication, data protection and device protection.
  • Page 3: Protecting Against Unauthorized Access - User Authentication

    Pre-boot Authentication on HP Notebooks Pre-boot authentication requiring passwords has been available on computers for some time. HP has now expanded this functionality to allow authentication via other devices. This allows users to use the same device for pre-boot as well as operating system level authentication, making the process easy and convenient for authorized users.
  • Page 4: Power-On Password Authentication Overview

    Enabling Power-on password Power-on password can be enabled via BIOS configuration by pressing F10 at startup. It can also be enabled via the BIOS configuration utility for HP ProtectTools. To enable, enter BIOS Setup, and from the Security menu, select Power-On Password.
  • Page 5: Embedded Security Chip Pre-Boot Authentication Overview

    The BIOS password should be stored on the smart card. This is done via the HP ProtectTools smart card security module. To complete this step, select the BIOS tab on the smart card security module and enable smart card security. If the card has not already been initialized, HP ProtectTools smart card security will automatically walk the user through card initialization.
  • Page 6: Drivelock Hard Drive Protection

    TPM enhanced DriveLock A new enhancement to the DriveLock feature is the TPM enhanced DriveLock. TPM enhanced DriveLock is another HP professional innovation that adds a level of security to the computer without sacrificing usability for the authorized user. TPM enhanced DriveLock ties pre-boot embedded security chip authentication to DriveLock by automatically using a TPM generated 32-character DriveLock user password.
  • Page 7: Boot Options

    This insight is behind the HP ProtectTools focus on usability, and the primary focus of the BIOS configuration for HP ProtectTools module. All security features provided by the BIOS configuration module are available in the BIOS setup.
  • Page 8 BIOS configuration for HP ProtectTools With BIOS Configuration for HP ProtectTools, authorized users can: • Manage power-on user and administrator passwords • Configure pre-boot authentication features such as smart cards, power -on passwords, and DriveLock • Configure the ability to boot to devices other than the primary hard drive...
  • Page 9 HP ProtectTools supported security technologies such as smart cards and embedded security chips Enabling access to BIOS security configuration from within the HP ProtectTools Security Manager creates an integrated security solution and enables authorized users to control every aspect of security management from a single application with a common user interface.
  • Page 10: Working With Bios Configuration Profiles

    Smart card pre-boot authentication BIOS Configuration for HP ProtectTools is supported on most HP business notebooks, desktops and workstations. Working with BIOS Configuration Profiles The BIOS Configuration for HP ProtectTools module contains the ability to create and manage profiles. Profiles allow the administrator to configure the BIOS security settings and save the settings to a file.
  • Page 11: Appendix

    The following table lists the BIOS security features mentioned in this whitepaper, and maps those features on to the supported notebook PC’s. Notebook Power-on DriveLock Model Password tc1100 nc4000 nc4010 nc4200 tc4200 nc6000 nc61xx nc6200 nc8000 nw8000 nc8200 nx8200 nw8200 Power-on Pre-boot Enhanced Smartcard DriveLock Authentication BIOS Configuration for HP ProtectTools...
  • Page 12: For More Information

    2. HP ProtectTools Embedded Security – the HP Trusted Computing Implementation, Hewlett-Packard Company, October 2003. 3. HP Embedded Security for ProtectTools - Embedded Security Chip Pre-Boot User Authentication, Hewlett-Packard Company, January 2005. 4. HP ProtectTools Embedded Security – Expanding Trust Within the Enterprise Computing Environment, Hewlett-Packard Company, May 2003.

Table of Contents