HP Brio BA200 Manuale utente

HP ProtectTools 2000

Smart Card Kit

User’s Guide

Notice

The information contained in this document is subject to change

without notice.

Hewlett-Packard makes no warranty of any kind with regard to this

material, including, but not limited to, the implied warranties of

merchantability and fitness for a particular purpose. Hewlett-Packard

shall not be liable for errors contained herein or for incidental or

consequential damages in connection with the furnishing, performance,

or use of this material.

This document contains proprietary information that is protected by

photocopied, reproduced, or translated to another language without the

prior written consent of Hewlett-Packard Company.

AdobeTM and AcrobatTM are trademarks of Adobe Systems Incorporated.

Microsoft®,MS

®, MS-DOS®, Windows®and Windows NT®are

registered trademarks of Microsoft Corporation in the United States and

other countries.

Hewlett-Packard France

Commercial Computing Division

38053 Grenoble Cedex 9

France

2000 Hewlett-Packard Company

iii

User’s Guide

This manual is intended for both the PC administrator and the PC user.

It describes how to:

•Install and deploy HP ProtectTools 2000 software

•Set up HP ProtectTools 2000 for use

•Manage security settings

•Manage smart cards

•Troubleshoot problems

•Find out where to get more information and support.

HP Custom Security Services

HP offers security consulting services and customized security

solutions, including the use of this product and other HP security

products. For more information, please contact your HP sales

representative.

Conventions Used in this Manual

This document describes the installation of software on a range of

Microsoft operating systems. Whenever some information applies only

to one or more operating systems, a small tab appears alongside to

indicate the operating system(s) concerned. See the following

example:

1This indicates that step 1 applies only to PCs running Windows NT

4.0 or Windows 2000. You can ignore this step if your PC is running

a different operating system.

When no such symbol is shown alongside a step or section in the

manual, the information concerns all operating systems:

2This indicates that step 2 applies to any system running one of the

supported operating systems: Windows 95, Windows 98, Windows

NT 4.0 or Windows 2000.

Windows NT 4.0

Windows 2000

Important Information

Folder Encryption (Windows 95, 98 and NT 4.0 Only)

You are about to install File Encryption software. This software enables

the use of an advanced security feature but it implies at the same time

theriskoflossofaccesstoyourconfidentialfiles.Toreducesucha

risk, HP strongly recommends you prepare in advance a recovery smart

card and/or recovery file that will still give you access to such files in

case you lose your smart card and/or password.

ATTENTION: in case of loss of your smart card and/or password you

may not be able to recover access to those encrypted files.

THE SOFTWARE IS PROVIDED "AS IS" WITHOUT ANY WARRANTIES

OF ANY KIND INCLUDING WARRANTIES OF MERCHANTABILITY,

FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT

OF INTELLECTUAL PROPERTY. IN NO EVENT WILL HP BE LIABLE

FOR ANY DAMAGES WHATSOEVER (INCLUDING, WITHOUT

LIMITATION, THOSE RESULTING FROM LOST PROFITS, LOST DATA

OR BUSINESS INTERRUPTION) ARISING OUT OF THE USE,

INABILITY TO USE, OR THE RESULTS OF USE OF THIS SOFTWARE,

WHETHER BASED ON WARRANTY, CONTRACT, TORT OR ANY

OTHER LEGAL THEORY AND WHETHER OR NOT ADVISED OF THE

POSSIBILITY OF SUCH DAMAGES. APPLICABLE LAW MAY NOT

ALLOW THE EXCLUSION OR LIMITATION OF INCIDENTAL OR

CONSEQUENTIAL DAMAGES, SO THE ABOVE LIMITATION OR

EXCLUSION MAY NOT APPLY TO YOU.

Import/Export Regulations

This computer system includes HP ProtectTools 2000. HP ProtectTools

2000 is made of a smart card (and associated reader and software

driver) and HP Encryption Smart Card Security System software with

the following encryption capabilities.

•40bit symmetrical encryption algorithm, used for data encryption

(confidentiality) (non-US version);

•128bit symmetrical encryption algorithm, used for data encryption

(confidentiality) (US version);

•512/56bit RSA private key algorithm, used for digital signature (non-

US version);

•1024/128bit RSA private key algorithm, used for digital signature

(US version).

Export of this product is not allowed to the following countries:

Afghanistan, Angola, Cuba, Iraq, Iran, Lybia, Macedonia, Montenegro,

Mozambique, North Korea, Pakistan, Serbia, Slovenia, Somalia, Sudan,

Syria. Export of this product to other countries may be subject to

regulations. For instructions on how to export this product, and

according to the country in which you have purchased this equipment,

please contact: in France: SCSSI (Service Central de la Sécuritédes

Systèmes d'Information, www.scssi.gouv.fr); in Germany: BAFA

(Bundesausfuhramt, Exportkontrolle, www.bafa.de); in the United-

Kingdom: DTI (Department of Trade and Industry, www.dti.gov.uk), in

the USA: Department of Commerce (Export Administration

Regulations, www.bxa.doc.gov).

Contents

English vii

1 Introduction to HP ProtectTools 2000

Introduction.............................................. 12

WhatisaSmartCard?........................................ 12

SmartCardKitContents...................................... 12

GemSAFESmartCards....................................... 13

PINNumbers ............................................... 13

BeforeYouBegin.......................................... 15

SystemRequirements(HPDesktopPCs) ........................ 15

SystemRequirements(OmniBookNotebookPCs)................. 15

Software Compatibility for PCs Running Windows NT 4.0 . . . . . . . . . . . 16

Features of HP ProtectTools 2000 . . . . . . . . . . .................... 17

Contents of the HP ProtectTools 2000 CD-ROM ................ 18

2 Installing HP ProtectTools 2000 Software

BeforeInstallingtheSoftware............................... 22

SoftwareInstallationProcedure............................. 23

Preparing a PC Running Windows NT 4.0 (HP Desktop PCs) . . . . . . . . 23

Preparing a PC Running Windows NT 4.0 (HP Notebook PCs) . . . . . . . 24

Installing the Drivers, Software and Reader (HP Desktop PCs) . . . . . . . 25

Installing the Drivers, Software and Reader (HP Notebook PCs). . . . . . 27

InstallingOptionalItems...................................... 29

Deploying ProtectTools 2000 Using a Network ................. 31

RemoteInstallationUsingaDeploymentTool..................... 31

Automatic Installation of ProtectTools 2000 . . . . . . . . . ............. 31

Uninstalling HP ProtectTools 2000 ........................... 33

viii English

UninstallingHPNTLock...................................... 33

UninstallingHPSoftPowerDown .............................. 34

3 Setting up HP ProtectTools 2000

PreparingaSmartCardforUse:Overview.................... 36

InitializingaSmartCard ................................... 37

Updating the PC’sBIOS(OmniBooksOnly)................... 38

EnablingBIOSSmartCardSecurity(OmniBooksOnly) ........ 39

SettingUpaBIOSUserPasswordCard.......................... 39

SettingUpFolderEncryptiononYourPC .................... 40

CreatingaRecoveryFile................................... 41

4 Managing Security and Smart Cards

TheHPSmartCardSecurityManager........................ 44

For Windows NT 4.0 and Windows 2000 Users . . . . . . . . . . . . ........ 44

ForWindows95andWindows98Users ......................... 45

Running the HP Smart Card Security Manager . . . . . . . . . . . . ........ 46

AccessingtheOnlineHelp .................................... 46

ManagingSecurity:ConfigurationSettings.................... 47

Smart Card–AllowInitializationOption.......................... 47

BeeponSmartCardRemovalOption ........................... 48

Win NT–LogonPoliciesOptions................................ 49

Win NT–LogonTextConfigurationOptions....................... 54

Win NT–LogonPowerManagementOptions...................... 54

English ix

AccountPolicies............................................. 55

BIOS Password Options (OmniBooks Only) . . . . . . . . . ............. 57

Win95/98Options ........................................... 58

CustomizingSecurityForYourInstalledBaseofPCs............... 59

ManagingSmartCards ..................................... 61

Using Smart Cards under Windows NT and Windows 2000 . . . . . . . . . . 62

InitializingFurtherSmartCards ............................... 63

Changing a Smart Card’sPIN .................................. 63

RestoringaSmartCardfromaRecoveryFile ..................... 64

Restoring a Smart Card Without the Recovery File . . . . . . . . . . . . . . . . . 65

Adding an Account to a Smart Card (Windows NT/Windows 2000). . . . 65

Removing an Account (Windows NT/Windows 2000) . . . . . . . . . . . . . . . 66

Changing an Account Password (Windows NT/Windows 2000) . . . . . . . 66

HPTopTools.............................................. 67

5 Troubleshooting

SmartCardTroubleshootingHelpZone....................... 70

IfYouDisconnecttheSmartCardReader ........................ 70

IfthePCFreezesAfterYouRestartIt ........................... 70

If the Smart Card’sPasswordisNotUpToDate ................... 70

WaitforService ............................................. 71

TroubleshootingTable........................................ 72

HPSmartCardDiagnosticsTool............................. 75

DiagnosticsOnlineHelp....................................... 75

UsingHPSmartCardDiagnostics .............................. 75

Documentation,HelpandSupport........................... 77

xEnglish

Altri manuali per Brio BA200

Questo manuale è adatto per i seguenti modelli

Indice

Altri manuali HP Software

HP 8/20q Manuale di istruzioni

HP StorageWorks 2/32 - SAN Switch Manuale di istruzioni

HP Rx2620-2 - Integrity - 0 MB RAM Manuale utente

HP Integrity BL860c Manuale utente

HP D6030A - NetServer - E50 Manuale utente

HP Integrity BL860c Manuale di istruzioni

HP TACL Istruzioni operative

HP D2D Manuale utente

HP ProLiant ML310 Generation 5p Manuale utente

HP Neoware e140 - Thin Client Manuale utente

HP FTAM/9000 Manuale utente

HP Data Protector A.06.11 Guida rapida alla configurazione

HP P9000 Manuale di istruzioni

HP Integrity Superdome 2 16-socket Manuale utente

HP C7791C - DesignJet 130 Color Inkjet Printer Guida alla configurazione

HP StorageWorks MSA 2/8 - SAN Switch Manuale utente

HP ProBook 4325s - Notebook PC Manuale di istruzioni

HP StorageWorks 2/16 - SAN Switch Manuale utente

HP Neoview SQL Manuale utente

HP StorageWorks MSA 2/8 - SAN Switch Manuale utente

HP Integrity rx5670 Manuale utente

HP StorageWorks 4/8 - SAN Switch Manuale di istruzioni

HP mfp digital sending software v. 4 Istruzioni per l'installazione

HP T5700 - compaq thin client Manuale utente

Manuali Software popolari di altre marche

COMPRO

COMPRO COMPROFM Manuale utente

Muratec

Muratec OFFICEBRIDGE ONLINE Manuale utente

Oracle

Oracle Contact Center Anywhere 8.1 Manuale utente

Adobe

Adobe 65007312 - Photoshop Lightroom Manuale

Avaya

Avaya NULL One-X for RIM Blackberry Manuale utente

PS Audio

PS Audio PowerPlay Manuale del proprietario

Brady

Brady LOCKOUT PRO 3.0 Manuale di servizio

Avaya

Avaya Interaction Center Manuale utente

Texas Instruments

Texas Instruments TI-83 Plus Silver Edition Manuale

Novell

Novell GROUPWISE 8 - INTERNET AGENT Manuale utente

Oracle

Oracle Application 9i Manuale utente

Acer

Acer RDM Manuale utente

Canon

Canon Vixia HF21 Manuale utente

Canon

Canon ZR950 Manuale utente

Samsung

Samsung Auto Backup Manuale utente

Polycom

Polycom Vortex EF2201 Istruzioni per l'installazione e il funzionamento

Brocade Communications Systems

Brocade Communications Systems Brocade 8/12c Manuale utente

Novell

Novell SP2 - S Manuale di istruzioni