Security: User Guide
Security: User Guide
User Guide
Copyright 2007 Hewlett-Packard Development Company, L.P. Windows is a U. S. registered trademark of Microsoft Corporation. The information contained herein is subject to change without notice. The only warranties for HP products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. HP shall not be liable for technical or editorial errors or omissions contained herein. First Edition: June 2007 Document Part Number: 448263-001
Product notice
This user guide describes features that are common to most models. Some features may not be available on your computer.
iii
iv
Product notice
Table of contents
1 Protecting the computer 2 Using passwords Setting passwords in Windows ............................................................................................................. 3 Setting passwords in Computer Setup ................................................................................................. 4 Setup password .................................................................................................................................... 5 Managing a setup password ................................................................................................ 6 Entering a setup password .................................................................................................. 7 Power-on password .............................................................................................................................. 8 Managing a power-on password .......................................................................................... 9 Entering a power-on password .......................................................................................... 10 Requiring a power-on password at restart ......................................................................... 11 Using Computer Setup DriveLock ...................................................................................................... 12 Setting a DriveLock password ........................................................................................... 13 Entering a DriveLock password ......................................................................................... 14 Changing a DriveLock password ....................................................................................... 15 Removing DriveLock protection ......................................................................................... 16 3 Using Computer Setup security features Securing system devices .................................................................................................................... 17 Using Computer Setup stringent security ........................................................................................... 18 Setting stringent security ................................................................................................... 19 Removing stringent security .............................................................................................. 20 Viewing Computer Setup System Information .................................................................................... 21 Using Computer Setup System IDs .................................................................................................... 22 4 Using antivirus software 5 Using firewall software 6 Installing critical security updates 7 Using HP ProtectTools Security Manager (select models only) 8 Installing a security cable
Index ................................................................................................................................................................... 28
vi
NOTE: Security solutions are designed to act as deterrents. These deterrents may not prevent a product from being mishandled or stolen. NOTE: Your computer supports CompuTrace, which is an online-security-based tracking and recovery service. If the computer is stolen, CompuTrace can track the computer if the unauthorized user accesses the Internet. You must purchase the software and subscribe to the service in order to use CompuTrace. For information about ordering the CompuTrace software, see the HP Web site at http://www.hpshopping.com. Security features provided with your computer can protect the computer, personal information, and data from a variety of risks. The way you use your computer will determine which security features you need to use. The Windows operating system offers certain security features. Additional security features are listed in the following table. Most of these additional security features can be configured in the Computer Setup utility (referred to hereafter as Computer Setup).
To protect against Unauthorized use of the computer Use this security feature Unauthorized access to Computer Setup (f10) Unauthorized access to the contents of a hard drive Unauthorized reset of Computer Setup (f10) passwords Unauthorized startup from an optical drive, diskette drive, or internal network adapter Unauthorized access to a Windows user account Unauthorized access to data Power-on authentication using passwords or smart cards HP ProtectTools Security Manager
Setup password in Computer Setup* DriveLock password in Computer Setup* Stringent security feature in Computer Setup* Boot options feature in Computer Setup* HP ProtectTools Security Manager Firewall software Windows updates HP ProtectTools Security Manager
Unauthorized access to Computer Setup settings and other system identification information Unauthorized removal of the computer
Setup password in Computer Setup* Security cable slot (used with an optional security cable)
*Computer Setup is a non-Windows utility accessed by pressing f10 when the computer is turned on or restarted. When using Computer Setup, you must use the keys on your computer to navigate and make selections.
Using passwords
Most security features use passwords. Whenever you set a password, write down the password and store it in a secure location away from the computer. Note the following password considerations: Setup, power-on, and DriveLock passwords are set in Computer Setup and are managed by the system BIOS. The smart card PIN and the embedded security password, which are HP ProtectTools Security Manager passwords, can be enabled in Computer Setup to provide BIOS password protection in addition to their normal HP ProtectTools functions. The smart card PIN is used with a supported smart card reader, and the embedded security password is used with the optional embedded security chip. Windows passwords are set only in the Windows operating system. If you forget the setup password set in Computer Setup, you will not be able to access the utility. If you have the stringent security feature enabled in Computer Setup and you forget the setup password or the power-on password, the computer is inaccessible and can no longer be used. Call technical support or your authorized service provider for additional information. If you forget both the power-on password and the setup password set in Computer Setup, you cannot turn on the computer or exit Hibernation. Call technical support or your authorized service provider for additional information. If you forget both the user password and the master DriveLock password set in Computer Setup, the hard drive that is protected by the passwords is permanently locked and can no longer be used.
You can use the same password for a Computer Setup feature and for a Windows security feature. You can also use the same password for more than one Computer Setup feature. Use the following tips for creating and saving passwords: When creating passwords, follow requirements set by the program. Write down your passwords and store them in a secure place away from the computer. Do not store passwords in a file on the computer.
The following tables list commonly used Windows and Computer Setup passwords and describe their functions.
*For information about setting a Windows administrator password or a Windows user password, select Start > Help and Support.
Setup password
The Computer Setup setup password protects the configuration settings and system identification information in Computer Setup. After this password is set, it must be entered to access Computer Setup and to make changes using Computer Setup. Note the following characteristics of the setup password: It is not interchangeable with a Windows administrator password, although both passwords can be identical. It is not displayed as it is set, entered, changed, or deleted. It must be set and entered with the same keys. For example, a setup password set with keyboard number keys will not be recognized if you enter it thereafter with embedded numeric keypad number keys. It can include any combination of up to 32 letters and numbers and is not case sensitive.
Setup password
To save your preferences, use the arrow keys to select File > Save changes and exit. Then follow the instructions on the screen.
Setup password
Power-on password
The Computer Setup power-on password prevents unauthorized use of the computer. After this password is set, it must be entered each time the computer is turned on. Note the following characteristics of a power-on password: It is not displayed as it is set, entered, changed, or deleted. It must be set and entered with the same keys. For example, a power-on password set with keyboard number keys will not be recognized if you enter it thereafter with embedded numeric keypad number keys. It can include any combination of up to 32 letters and numbers and is not case sensitive.
3.
To save your preferences, use the arrow keys to select File > Save changes and exit. Then follow the instructions on the screen.
Power-on password
10
Power-on password
11
NOTE: When your power-on password and DriveLock user password are identical, you will be prompted to enter only a power-on password instead of both a power-on password and a DriveLock user password.
12
10. To save your preferences, use the arrow keys to select File > Save changes and exit. Then follow the instructions on the screen. Your preferences go into effect when the computer restarts.
13
14
5.
15
16
17
18
19
20
To view this general system information, follow these steps: 1. 2. Open Computer Setup by turning on or restarting the computer, and then pressing f10 while the F10 = ROM Based Setup message is displayed in the lower-left corner of the screen. Use the arrow keys to select File > System Information, and then press enter.
NOTE: To prevent unauthorized access to this information, you must create a setup password in Computer Setup.
21
22
When you use the computer to access e-mail, a network, or the Internet, you expose the computer to computer viruses. Computer viruses can disable the operating system, applications, or utilities, or cause them to function abnormally. Antivirus software can detect most viruses, destroy them, and in most cases, repair any damage they have caused. To provide ongoing protection against newly discovered viruses, antivirus software must be updated. Norton Internet Security is preinstalled on the computer. For information about using the Norton Internet Security software, select Start > All Programs > Norton Internet Security > Help and Support. For more information about computer viruses, type viruses in the Search field in Help and Support.
23
When you use the computer to access e-mail, a network, or the Internet, unauthorized persons may be able to gain access to information about you, the computer, and your personal files. Use the firewall software preinstalled on the computer to protect your privacy. Firewall features include information on logging and reporting, and automatic alarms to monitor all incoming and outgoing traffic. Refer to the firewall documentation or contact your firewall manufacturer for more information. NOTE: Under some circumstances a firewall can block access to Internet games, interfere with printer or file sharing on a network, or block authorized e-mail attachments. To temporarily solve the problem, disable the firewall, perform the task that you want to perform, and then reenable the firewall. To permanently resolve the problem, reconfigure the firewall.
24
CAUTION: To protect the computer from security breaches and computer viruses, install the online critical updates from Microsoft as soon as you receive an alert. Updates to the operating system and other software may have become available after the computer was shipped. To be sure all available updates are installed on the computer observe these guidelines: Run Windows Update monthly to install the latest software from Microsoft. Obtain updates, as they are released, from the Microsoft Web site and through the updates link in Help and Support.
25
Select computer models include HP ProtectTools Security Manager. This software can be accessed through Windows Control Panel. It provides security features that help protect against unauthorized access to the computer, networks, and critical data. For more information, refer to the HP ProtectTools online Help.
26
NOTE: The security cable is designed to act as a deterrent, but it may not prevent the computer from being mishandled or stolen. 1. 2. 3. Loop the security cable around a secured object. Insert the key (1) into the cable lock (2). Insert the cable lock into the security cable slot on the computer (3), and then lock the cable lock with the key.
NOTE: Your computer may look different from the illustration. The location of the security cable slot varies by model.
27
Index
C cable, security 27 Computer Setup device security 17 DriveLock password 12 power-on password 8 setup password 5 stringent security 18 critical updates, software 25 D device security 17 DriveLock password changing 15 description 12 entering 14 removing 16 setting 13 F firewall software 24 H HP ProtectTools Security Manager 26 P passwords administrator 3 DriveLock 12 power-on 8 setup 5 user 3 S security cable
security, protecting the computer 1 software antivirus 23 critical updates 25 firewall 24 stringent security 18 U user password
27
28
Index