HP Brio BA200 User manual

HP ProtectTools 2000

Smart Card Kit

User’s Guide

Notice

The information contained in this document is subject to change

without notice.

Hewlett-Packard makes no warranty of any kind with regard to this

material, including, but not limited to, the implied warranties of

merchantability and fitness for a particular purpose. Hewlett-Packard

shall not be liable for errors contained herein or for incidental or

consequential damages in connection with the furnishing, performance,

or use of this material.

This document contains proprietary information that is protected by

photocopied, reproduced, or translated to another language without the

prior written consent of Hewlett-Packard Company.

AdobeTM and AcrobatTM are trademarks of Adobe Systems Incorporated.

Microsoft®,MS

®, MS-DOS®, Windows®and Windows NT®are

registered trademarks of Microsoft Corporation in the United States and

other countries.

Hewlett-Packard France

Commercial Computing Division

38053 Grenoble Cedex 9

France

2000 Hewlett-Packard Company

iii

User’s Guide

This manual is intended for both the PC administrator and the PC user.

It describes how to:

•Install and deploy HP ProtectTools 2000 software

•Set up HP ProtectTools 2000 for use

•Manage security settings

•Manage smart cards

•Troubleshoot problems

•Find out where to get more information and support.

HP Custom Security Services

HP offers security consulting services and customized security

solutions, including the use of this product and other HP security

products. For more information, please contact your HP sales

representative.

Conventions Used in this Manual

This document describes the installation of software on a range of

Microsoft operating systems. Whenever some information applies only

to one or more operating systems, a small tab appears alongside to

indicate the operating system(s) concerned. See the following

example:

1This indicates that step 1 applies only to PCs running Windows NT

4.0 or Windows 2000. You can ignore this step if your PC is running

a different operating system.

When no such symbol is shown alongside a step or section in the

manual, the information concerns all operating systems:

2This indicates that step 2 applies to any system running one of the

supported operating systems: Windows 95, Windows 98, Windows

NT 4.0 or Windows 2000.

Windows NT 4.0

Windows 2000

Important Information

Folder Encryption (Windows 95, 98 and NT 4.0 Only)

You are about to install File Encryption software. This software enables

the use of an advanced security feature but it implies at the same time

theriskoflossofaccesstoyourconfidentialfiles.Toreducesucha

risk, HP strongly recommends you prepare in advance a recovery smart

card and/or recovery file that will still give you access to such files in

case you lose your smart card and/or password.

ATTENTION: in case of loss of your smart card and/or password you

may not be able to recover access to those encrypted files.

THE SOFTWARE IS PROVIDED "AS IS" WITHOUT ANY WARRANTIES

OF ANY KIND INCLUDING WARRANTIES OF MERCHANTABILITY,

FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT

OF INTELLECTUAL PROPERTY. IN NO EVENT WILL HP BE LIABLE

FOR ANY DAMAGES WHATSOEVER (INCLUDING, WITHOUT

LIMITATION, THOSE RESULTING FROM LOST PROFITS, LOST DATA

OR BUSINESS INTERRUPTION) ARISING OUT OF THE USE,

INABILITY TO USE, OR THE RESULTS OF USE OF THIS SOFTWARE,

WHETHER BASED ON WARRANTY, CONTRACT, TORT OR ANY

OTHER LEGAL THEORY AND WHETHER OR NOT ADVISED OF THE

POSSIBILITY OF SUCH DAMAGES. APPLICABLE LAW MAY NOT

ALLOW THE EXCLUSION OR LIMITATION OF INCIDENTAL OR

CONSEQUENTIAL DAMAGES, SO THE ABOVE LIMITATION OR

EXCLUSION MAY NOT APPLY TO YOU.

Import/Export Regulations

This computer system includes HP ProtectTools 2000. HP ProtectTools

2000 is made of a smart card (and associated reader and software

driver) and HP Encryption Smart Card Security System software with

the following encryption capabilities.

•40bit symmetrical encryption algorithm, used for data encryption

(confidentiality) (non-US version);

•128bit symmetrical encryption algorithm, used for data encryption

(confidentiality) (US version);

•512/56bit RSA private key algorithm, used for digital signature (non-

US version);

•1024/128bit RSA private key algorithm, used for digital signature

(US version).

Export of this product is not allowed to the following countries:

Afghanistan, Angola, Cuba, Iraq, Iran, Lybia, Macedonia, Montenegro,

Mozambique, North Korea, Pakistan, Serbia, Slovenia, Somalia, Sudan,

Syria. Export of this product to other countries may be subject to

regulations. For instructions on how to export this product, and

according to the country in which you have purchased this equipment,

please contact: in France: SCSSI (Service Central de la Sécuritédes

Systèmes d'Information, www.scssi.gouv.fr); in Germany: BAFA

(Bundesausfuhramt, Exportkontrolle, www.bafa.de); in the United-

Kingdom: DTI (Department of Trade and Industry, www.dti.gov.uk), in

the USA: Department of Commerce (Export Administration

Regulations, www.bxa.doc.gov).

Contents

English vii

1 Introduction to HP ProtectTools 2000

Introduction.............................................. 12

WhatisaSmartCard?........................................ 12

SmartCardKitContents...................................... 12

GemSAFESmartCards....................................... 13

PINNumbers ............................................... 13

BeforeYouBegin.......................................... 15

SystemRequirements(HPDesktopPCs) ........................ 15

SystemRequirements(OmniBookNotebookPCs)................. 15

Software Compatibility for PCs Running Windows NT 4.0 . . . . . . . . . . . 16

Features of HP ProtectTools 2000 . . . . . . . . . . .................... 17

Contents of the HP ProtectTools 2000 CD-ROM ................ 18

2 Installing HP ProtectTools 2000 Software

BeforeInstallingtheSoftware............................... 22

SoftwareInstallationProcedure............................. 23

Preparing a PC Running Windows NT 4.0 (HP Desktop PCs) . . . . . . . . 23

Preparing a PC Running Windows NT 4.0 (HP Notebook PCs) . . . . . . . 24

Installing the Drivers, Software and Reader (HP Desktop PCs) . . . . . . . 25

Installing the Drivers, Software and Reader (HP Notebook PCs). . . . . . 27

InstallingOptionalItems...................................... 29

Deploying ProtectTools 2000 Using a Network ................. 31

RemoteInstallationUsingaDeploymentTool..................... 31

Automatic Installation of ProtectTools 2000 . . . . . . . . . ............. 31

Uninstalling HP ProtectTools 2000 ........................... 33

viii English

UninstallingHPNTLock...................................... 33

UninstallingHPSoftPowerDown .............................. 34

3 Setting up HP ProtectTools 2000

PreparingaSmartCardforUse:Overview.................... 36

InitializingaSmartCard ................................... 37

Updating the PC’sBIOS(OmniBooksOnly)................... 38

EnablingBIOSSmartCardSecurity(OmniBooksOnly) ........ 39

SettingUpaBIOSUserPasswordCard.......................... 39

SettingUpFolderEncryptiononYourPC .................... 40

CreatingaRecoveryFile................................... 41

4 Managing Security and Smart Cards

TheHPSmartCardSecurityManager........................ 44

For Windows NT 4.0 and Windows 2000 Users . . . . . . . . . . . . ........ 44

ForWindows95andWindows98Users ......................... 45

Running the HP Smart Card Security Manager . . . . . . . . . . . . ........ 46

AccessingtheOnlineHelp .................................... 46

ManagingSecurity:ConfigurationSettings.................... 47

Smart Card–AllowInitializationOption.......................... 47

BeeponSmartCardRemovalOption ........................... 48

Win NT–LogonPoliciesOptions................................ 49

Win NT–LogonTextConfigurationOptions....................... 54

Win NT–LogonPowerManagementOptions...................... 54

English ix

AccountPolicies............................................. 55

BIOS Password Options (OmniBooks Only) . . . . . . . . . ............. 57

Win95/98Options ........................................... 58

CustomizingSecurityForYourInstalledBaseofPCs............... 59

ManagingSmartCards ..................................... 61

Using Smart Cards under Windows NT and Windows 2000 . . . . . . . . . . 62

InitializingFurtherSmartCards ............................... 63

Changing a Smart Card’sPIN .................................. 63

RestoringaSmartCardfromaRecoveryFile ..................... 64

Restoring a Smart Card Without the Recovery File . . . . . . . . . . . . . . . . . 65

Adding an Account to a Smart Card (Windows NT/Windows 2000). . . . 65

Removing an Account (Windows NT/Windows 2000) . . . . . . . . . . . . . . . 66

Changing an Account Password (Windows NT/Windows 2000) . . . . . . . 66

HPTopTools.............................................. 67

5 Troubleshooting

SmartCardTroubleshootingHelpZone....................... 70

IfYouDisconnecttheSmartCardReader ........................ 70

IfthePCFreezesAfterYouRestartIt ........................... 70

If the Smart Card’sPasswordisNotUpToDate ................... 70

WaitforService ............................................. 71

TroubleshootingTable........................................ 72

HPSmartCardDiagnosticsTool............................. 75

DiagnosticsOnlineHelp....................................... 75

UsingHPSmartCardDiagnostics .............................. 75

Documentation,HelpandSupport........................... 77

xEnglish

Other manuals for Brio BA200

This manual suits for next models

Table of contents

Other HP Software manuals

HP Integrity rx1620 User manual

HP Data Protector A.06.11 Quick setup guide

HP C7791C - DesignJet 130 Color Inkjet Printer Configuration guide

HP StorageWorks 8/8 - SAN Switch Instruction Manual

HP BB118BV - StorageWorks Data Protector Express... User manual

HP 500 G2 User manual

HP 6300C - ScanJet - Flatbed Scanner User manual

HP Rx2620-2 - Integrity - 0 MB RAM User manual

HP Integrity BL860c User manual

HP StorageWorks MSA 2/8 - SAN Switch User manual

HP BB118BV - StorageWorks Data Protector Express... Operation instructions

HP Deskjet 812c Instruction Manual

HP T5145 - Thin Client - Tower Service manual

HP Pavilion w1000 - Desktop PC Operating manual

HP 348773-001 User manual

HP Workstation zx6000 How to use

HP C7791C - DesignJet 130 Color Inkjet Printer Configuration guide

HP Integrity rx1600 Quick reference guide

HP e-Diagtools 3.02 Manual

HP Integrity rx2800 - i2 Quick reference guide

HP Integrity rx2800 - i2 User manual

HP ProCurve 3500yl Series How to use

HP Compaq NC4000 Owner's manual

HP t5630 - Thin Client Installation and operating instructions

Popular Software manuals by other brands

COMPRO

COMPRO COMPROFM manual

Muratec

Muratec OFFICEBRIDGE ONLINE user guide

Oracle

Oracle Contact Center Anywhere 8.1 installation guide

Adobe

Adobe 65007312 - Photoshop Lightroom Programmer's guide

Avaya

Avaya NULL One-X for RIM Blackberry user guide

PS Audio

PS Audio PowerPlay Programming manual

Brady

Brady LOCKOUT PRO 3.0 Administrator's guide

Avaya

Avaya Interaction Center user guide

Texas Instruments

Texas Instruments TI-83 Plus Silver Edition Guide book

Novell

Novell GROUPWISE 8 - INTERNET AGENT manual

Oracle

Oracle Application 9i Configuration guide

Acer

Acer RDM user guide

Canon

Canon Vixia HF21 instruction manual

Canon

Canon ZR950 instruction manual

Samsung

Samsung Auto Backup user manual

Polycom

Polycom Vortex EF2201 Application note

Brocade Communications Systems

Brocade Communications Systems Brocade 8/12c user manual

Novell

Novell SP2 - S release note