HP Brio BA200 Manual de usuario

HP ProtectTools 2000

Smart Card Kit

User’s Guide

Notice

The information contained in this document is subject to change

without notice.

Hewlett-Packard makes no warranty of any kind with regard to this

material, including, but not limited to, the implied warranties of

merchantability and fitness for a particular purpose. Hewlett-Packard

shall not be liable for errors contained herein or for incidental or

consequential damages in connection with the furnishing, performance,

or use of this material.

This document contains proprietary information that is protected by

photocopied, reproduced, or translated to another language without the

prior written consent of Hewlett-Packard Company.

AdobeTM and AcrobatTM are trademarks of Adobe Systems Incorporated.

Microsoft®,MS

®, MS-DOS®, Windows®and Windows NT®are

registered trademarks of Microsoft Corporation in the United States and

other countries.

Hewlett-Packard France

Commercial Computing Division

38053 Grenoble Cedex 9

France

2000 Hewlett-Packard Company

iii

User’s Guide

This manual is intended for both the PC administrator and the PC user.

It describes how to:

•Install and deploy HP ProtectTools 2000 software

•Set up HP ProtectTools 2000 for use

•Manage security settings

•Manage smart cards

•Troubleshoot problems

•Find out where to get more information and support.

HP Custom Security Services

HP offers security consulting services and customized security

solutions, including the use of this product and other HP security

products. For more information, please contact your HP sales

representative.

Conventions Used in this Manual

This document describes the installation of software on a range of

Microsoft operating systems. Whenever some information applies only

to one or more operating systems, a small tab appears alongside to

indicate the operating system(s) concerned. See the following

example:

1This indicates that step 1 applies only to PCs running Windows NT

4.0 or Windows 2000. You can ignore this step if your PC is running

a different operating system.

When no such symbol is shown alongside a step or section in the

manual, the information concerns all operating systems:

2This indicates that step 2 applies to any system running one of the

supported operating systems: Windows 95, Windows 98, Windows

NT 4.0 or Windows 2000.

Windows NT 4.0

Windows 2000

Important Information

Folder Encryption (Windows 95, 98 and NT 4.0 Only)

You are about to install File Encryption software. This software enables

the use of an advanced security feature but it implies at the same time

theriskoflossofaccesstoyourconfidentialfiles.Toreducesucha

risk, HP strongly recommends you prepare in advance a recovery smart

card and/or recovery file that will still give you access to such files in

case you lose your smart card and/or password.

ATTENTION: in case of loss of your smart card and/or password you

may not be able to recover access to those encrypted files.

THE SOFTWARE IS PROVIDED "AS IS" WITHOUT ANY WARRANTIES

OF ANY KIND INCLUDING WARRANTIES OF MERCHANTABILITY,

FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT

OF INTELLECTUAL PROPERTY. IN NO EVENT WILL HP BE LIABLE

FOR ANY DAMAGES WHATSOEVER (INCLUDING, WITHOUT

LIMITATION, THOSE RESULTING FROM LOST PROFITS, LOST DATA

OR BUSINESS INTERRUPTION) ARISING OUT OF THE USE,

INABILITY TO USE, OR THE RESULTS OF USE OF THIS SOFTWARE,

WHETHER BASED ON WARRANTY, CONTRACT, TORT OR ANY

OTHER LEGAL THEORY AND WHETHER OR NOT ADVISED OF THE

POSSIBILITY OF SUCH DAMAGES. APPLICABLE LAW MAY NOT

ALLOW THE EXCLUSION OR LIMITATION OF INCIDENTAL OR

CONSEQUENTIAL DAMAGES, SO THE ABOVE LIMITATION OR

EXCLUSION MAY NOT APPLY TO YOU.

Import/Export Regulations

This computer system includes HP ProtectTools 2000. HP ProtectTools

2000 is made of a smart card (and associated reader and software

driver) and HP Encryption Smart Card Security System software with

the following encryption capabilities.

•40bit symmetrical encryption algorithm, used for data encryption

(confidentiality) (non-US version);

•128bit symmetrical encryption algorithm, used for data encryption

(confidentiality) (US version);

•512/56bit RSA private key algorithm, used for digital signature (non-

US version);

•1024/128bit RSA private key algorithm, used for digital signature

(US version).

Export of this product is not allowed to the following countries:

Afghanistan, Angola, Cuba, Iraq, Iran, Lybia, Macedonia, Montenegro,

Mozambique, North Korea, Pakistan, Serbia, Slovenia, Somalia, Sudan,

Syria. Export of this product to other countries may be subject to

regulations. For instructions on how to export this product, and

according to the country in which you have purchased this equipment,

please contact: in France: SCSSI (Service Central de la Sécuritédes

Systèmes d'Information, www.scssi.gouv.fr); in Germany: BAFA

(Bundesausfuhramt, Exportkontrolle, www.bafa.de); in the United-

Kingdom: DTI (Department of Trade and Industry, www.dti.gov.uk), in

the USA: Department of Commerce (Export Administration

Regulations, www.bxa.doc.gov).

Contents

English vii

1 Introduction to HP ProtectTools 2000

Introduction.............................................. 12

WhatisaSmartCard?........................................ 12

SmartCardKitContents...................................... 12

GemSAFESmartCards....................................... 13

PINNumbers ............................................... 13

BeforeYouBegin.......................................... 15

SystemRequirements(HPDesktopPCs) ........................ 15

SystemRequirements(OmniBookNotebookPCs)................. 15

Software Compatibility for PCs Running Windows NT 4.0 . . . . . . . . . . . 16

Features of HP ProtectTools 2000 . . . . . . . . . . .................... 17

Contents of the HP ProtectTools 2000 CD-ROM ................ 18

2 Installing HP ProtectTools 2000 Software

BeforeInstallingtheSoftware............................... 22

SoftwareInstallationProcedure............................. 23

Preparing a PC Running Windows NT 4.0 (HP Desktop PCs) . . . . . . . . 23

Preparing a PC Running Windows NT 4.0 (HP Notebook PCs) . . . . . . . 24

Installing the Drivers, Software and Reader (HP Desktop PCs) . . . . . . . 25

Installing the Drivers, Software and Reader (HP Notebook PCs). . . . . . 27

InstallingOptionalItems...................................... 29

Deploying ProtectTools 2000 Using a Network ................. 31

RemoteInstallationUsingaDeploymentTool..................... 31

Automatic Installation of ProtectTools 2000 . . . . . . . . . ............. 31

Uninstalling HP ProtectTools 2000 ........................... 33

viii English

UninstallingHPNTLock...................................... 33

UninstallingHPSoftPowerDown .............................. 34

3 Setting up HP ProtectTools 2000

PreparingaSmartCardforUse:Overview.................... 36

InitializingaSmartCard ................................... 37

Updating the PC’sBIOS(OmniBooksOnly)................... 38

EnablingBIOSSmartCardSecurity(OmniBooksOnly) ........ 39

SettingUpaBIOSUserPasswordCard.......................... 39

SettingUpFolderEncryptiononYourPC .................... 40

CreatingaRecoveryFile................................... 41

4 Managing Security and Smart Cards

TheHPSmartCardSecurityManager........................ 44

For Windows NT 4.0 and Windows 2000 Users . . . . . . . . . . . . ........ 44

ForWindows95andWindows98Users ......................... 45

Running the HP Smart Card Security Manager . . . . . . . . . . . . ........ 46

AccessingtheOnlineHelp .................................... 46

ManagingSecurity:ConfigurationSettings.................... 47

Smart Card–AllowInitializationOption.......................... 47

BeeponSmartCardRemovalOption ........................... 48

Win NT–LogonPoliciesOptions................................ 49

Win NT–LogonTextConfigurationOptions....................... 54

Win NT–LogonPowerManagementOptions...................... 54

English ix

AccountPolicies............................................. 55

BIOS Password Options (OmniBooks Only) . . . . . . . . . ............. 57

Win95/98Options ........................................... 58

CustomizingSecurityForYourInstalledBaseofPCs............... 59

ManagingSmartCards ..................................... 61

Using Smart Cards under Windows NT and Windows 2000 . . . . . . . . . . 62

InitializingFurtherSmartCards ............................... 63

Changing a Smart Card’sPIN .................................. 63

RestoringaSmartCardfromaRecoveryFile ..................... 64

Restoring a Smart Card Without the Recovery File . . . . . . . . . . . . . . . . . 65

Adding an Account to a Smart Card (Windows NT/Windows 2000). . . . 65

Removing an Account (Windows NT/Windows 2000) . . . . . . . . . . . . . . . 66

Changing an Account Password (Windows NT/Windows 2000) . . . . . . . 66

HPTopTools.............................................. 67

5 Troubleshooting

SmartCardTroubleshootingHelpZone....................... 70

IfYouDisconnecttheSmartCardReader ........................ 70

IfthePCFreezesAfterYouRestartIt ........................... 70

If the Smart Card’sPasswordisNotUpToDate ................... 70

WaitforService ............................................. 71

TroubleshootingTable........................................ 72

HPSmartCardDiagnosticsTool............................. 75

DiagnosticsOnlineHelp....................................... 75

UsingHPSmartCardDiagnostics .............................. 75

Documentation,HelpandSupport........................... 77

xEnglish

Otros manuales para Brio BA200

Este manual sirve para los siguientes modelos

Tabla de contenidos

Otros manuales de Software de HP

HP SN3000B Manual de servicio

HP NonStop SSL Manual de usuario

HP Rx2620-2 - Integrity - 0 MB RAM Manual de usuario

HP Integrity BL890c - i2 Server Manual de instrucciones

HP BL30p - ProLiant - 1 GB RAM Manual de usuario

HP StoreFabric SN6500B Manual de servicio

HP SysMan Manual de usuario

HP ProCurve 3500yl Series Cómo utilizar

HP StorageWorks XP10000 - Disk Array Manual de instrucciones

HP Neoware c50 - Thin Client Manual de usuario

HP 742n - Pavilion - 512 MB RAM Instrucciones de instalación y funcionamiento

HP SureStore Optical 2600fx Manual de instalación

HP BladeSystem Dual NC370i - Multifunction Network... Manual de usuario

HP ACC2 Aurora Manual de usuario

HP T5135 - Compaq Thin Client Manual de usuario

HP AK373A - StorageWorks All-in-One Storage System 1200r 5.4TB SAS Model NAS... Cómo utilizar

HP OmniBook 2100 Manual de usuario

HP BAAD0010HBK-NHSN Manual de usuario

HP StorageWorks MSA 2/8 - SAN Switch Manual de usuario

HP StorageWorks 8/8 - SAN Switch Manual de instrucciones

HP BladeSystem Dual NC370i - Multifunction Network... Manual de usuario

HP Data Protector A.06.11 Guía de configuración rápida

HP HPE XP P9500 Manual de instrucciones

HP NC373m - PCI Express Dual Port Multifunction Gigabit Server... Manual de usuario

Manuales populares de Software de otras marcas

COMPRO

COMPRO COMPROFM Manual de usuario

Muratec

Muratec OFFICEBRIDGE ONLINE Manual de usuario

Oracle

Oracle Contact Center Anywhere 8.1 Manual de usuario

Adobe

Adobe 65007312 - Photoshop Lightroom Manual

Avaya

Avaya NULL One-X for RIM Blackberry Manual de usuario

PS Audio

PS Audio PowerPlay Manual del propietario

Brady

Brady LOCKOUT PRO 3.0 Manual de servicio

Avaya

Avaya Interaction Center Manual de usuario

Texas Instruments

Texas Instruments TI-83 Plus Silver Edition Manual

Novell

Novell GROUPWISE 8 - INTERNET AGENT Manual de usuario

Oracle

Oracle Application 9i Manual de usuario

Acer

Acer RDM Manual de usuario

Canon

Canon Vixia HF21 Manual de usuario

Canon

Canon ZR950 Manual de usuario

Samsung

Samsung Auto Backup Manual de usuario

Polycom

Polycom Vortex EF2201 Instrucciones de instalación y funcionamiento

Brocade Communications Systems

Brocade Communications Systems Brocade 8/12c Manual de usuario

Novell

Novell SP2 - S Manual de instrucciones