HP Brio BA200 Manuel utilisateur

HP ProtectTools 2000

Smart Card Kit

User’s Guide

Notice

The information contained in this document is subject to change

without notice.

Hewlett-Packard makes no warranty of any kind with regard to this

material, including, but not limited to, the implied warranties of

merchantability and fitness for a particular purpose. Hewlett-Packard

shall not be liable for errors contained herein or for incidental or

consequential damages in connection with the furnishing, performance,

or use of this material.

This document contains proprietary information that is protected by

photocopied, reproduced, or translated to another language without the

prior written consent of Hewlett-Packard Company.

AdobeTM and AcrobatTM are trademarks of Adobe Systems Incorporated.

Microsoft®,MS

®, MS-DOS®, Windows®and Windows NT®are

registered trademarks of Microsoft Corporation in the United States and

other countries.

Hewlett-Packard France

Commercial Computing Division

38053 Grenoble Cedex 9

France

2000 Hewlett-Packard Company

iii

User’s Guide

This manual is intended for both the PC administrator and the PC user.

It describes how to:

•Install and deploy HP ProtectTools 2000 software

•Set up HP ProtectTools 2000 for use

•Manage security settings

•Manage smart cards

•Troubleshoot problems

•Find out where to get more information and support.

HP Custom Security Services

HP offers security consulting services and customized security

solutions, including the use of this product and other HP security

products. For more information, please contact your HP sales

representative.

Conventions Used in this Manual

This document describes the installation of software on a range of

Microsoft operating systems. Whenever some information applies only

to one or more operating systems, a small tab appears alongside to

indicate the operating system(s) concerned. See the following

example:

1This indicates that step 1 applies only to PCs running Windows NT

4.0 or Windows 2000. You can ignore this step if your PC is running

a different operating system.

When no such symbol is shown alongside a step or section in the

manual, the information concerns all operating systems:

2This indicates that step 2 applies to any system running one of the

supported operating systems: Windows 95, Windows 98, Windows

NT 4.0 or Windows 2000.

Windows NT 4.0

Windows 2000

Important Information

Folder Encryption (Windows 95, 98 and NT 4.0 Only)

You are about to install File Encryption software. This software enables

the use of an advanced security feature but it implies at the same time

theriskoflossofaccesstoyourconfidentialfiles.Toreducesucha

risk, HP strongly recommends you prepare in advance a recovery smart

card and/or recovery file that will still give you access to such files in

case you lose your smart card and/or password.

ATTENTION: in case of loss of your smart card and/or password you

may not be able to recover access to those encrypted files.

THE SOFTWARE IS PROVIDED "AS IS" WITHOUT ANY WARRANTIES

OF ANY KIND INCLUDING WARRANTIES OF MERCHANTABILITY,

FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT

OF INTELLECTUAL PROPERTY. IN NO EVENT WILL HP BE LIABLE

FOR ANY DAMAGES WHATSOEVER (INCLUDING, WITHOUT

LIMITATION, THOSE RESULTING FROM LOST PROFITS, LOST DATA

OR BUSINESS INTERRUPTION) ARISING OUT OF THE USE,

INABILITY TO USE, OR THE RESULTS OF USE OF THIS SOFTWARE,

WHETHER BASED ON WARRANTY, CONTRACT, TORT OR ANY

OTHER LEGAL THEORY AND WHETHER OR NOT ADVISED OF THE

POSSIBILITY OF SUCH DAMAGES. APPLICABLE LAW MAY NOT

ALLOW THE EXCLUSION OR LIMITATION OF INCIDENTAL OR

CONSEQUENTIAL DAMAGES, SO THE ABOVE LIMITATION OR

EXCLUSION MAY NOT APPLY TO YOU.

Import/Export Regulations

This computer system includes HP ProtectTools 2000. HP ProtectTools

2000 is made of a smart card (and associated reader and software

driver) and HP Encryption Smart Card Security System software with

the following encryption capabilities.

•40bit symmetrical encryption algorithm, used for data encryption

(confidentiality) (non-US version);

•128bit symmetrical encryption algorithm, used for data encryption

(confidentiality) (US version);

•512/56bit RSA private key algorithm, used for digital signature (non-

US version);

•1024/128bit RSA private key algorithm, used for digital signature

(US version).

Export of this product is not allowed to the following countries:

Afghanistan, Angola, Cuba, Iraq, Iran, Lybia, Macedonia, Montenegro,

Mozambique, North Korea, Pakistan, Serbia, Slovenia, Somalia, Sudan,

Syria. Export of this product to other countries may be subject to

regulations. For instructions on how to export this product, and

according to the country in which you have purchased this equipment,

please contact: in France: SCSSI (Service Central de la Sécuritédes

Systèmes d'Information, www.scssi.gouv.fr); in Germany: BAFA

(Bundesausfuhramt, Exportkontrolle, www.bafa.de); in the United-

Kingdom: DTI (Department of Trade and Industry, www.dti.gov.uk), in

the USA: Department of Commerce (Export Administration

Regulations, www.bxa.doc.gov).

Contents

English vii

1 Introduction to HP ProtectTools 2000

Introduction.............................................. 12

WhatisaSmartCard?........................................ 12

SmartCardKitContents...................................... 12

GemSAFESmartCards....................................... 13

PINNumbers ............................................... 13

BeforeYouBegin.......................................... 15

SystemRequirements(HPDesktopPCs) ........................ 15

SystemRequirements(OmniBookNotebookPCs)................. 15

Software Compatibility for PCs Running Windows NT 4.0 . . . . . . . . . . . 16

Features of HP ProtectTools 2000 . . . . . . . . . . .................... 17

Contents of the HP ProtectTools 2000 CD-ROM ................ 18

2 Installing HP ProtectTools 2000 Software

BeforeInstallingtheSoftware............................... 22

SoftwareInstallationProcedure............................. 23

Preparing a PC Running Windows NT 4.0 (HP Desktop PCs) . . . . . . . . 23

Preparing a PC Running Windows NT 4.0 (HP Notebook PCs) . . . . . . . 24

Installing the Drivers, Software and Reader (HP Desktop PCs) . . . . . . . 25

Installing the Drivers, Software and Reader (HP Notebook PCs). . . . . . 27

InstallingOptionalItems...................................... 29

Deploying ProtectTools 2000 Using a Network ................. 31

RemoteInstallationUsingaDeploymentTool..................... 31

Automatic Installation of ProtectTools 2000 . . . . . . . . . ............. 31

Uninstalling HP ProtectTools 2000 ........................... 33

viii English

UninstallingHPNTLock...................................... 33

UninstallingHPSoftPowerDown .............................. 34

3 Setting up HP ProtectTools 2000

PreparingaSmartCardforUse:Overview.................... 36

InitializingaSmartCard ................................... 37

Updating the PC’sBIOS(OmniBooksOnly)................... 38

EnablingBIOSSmartCardSecurity(OmniBooksOnly) ........ 39

SettingUpaBIOSUserPasswordCard.......................... 39

SettingUpFolderEncryptiononYourPC .................... 40

CreatingaRecoveryFile................................... 41

4 Managing Security and Smart Cards

TheHPSmartCardSecurityManager........................ 44

For Windows NT 4.0 and Windows 2000 Users . . . . . . . . . . . . ........ 44

ForWindows95andWindows98Users ......................... 45

Running the HP Smart Card Security Manager . . . . . . . . . . . . ........ 46

AccessingtheOnlineHelp .................................... 46

ManagingSecurity:ConfigurationSettings.................... 47

Smart Card–AllowInitializationOption.......................... 47

BeeponSmartCardRemovalOption ........................... 48

Win NT–LogonPoliciesOptions................................ 49

Win NT–LogonTextConfigurationOptions....................... 54

Win NT–LogonPowerManagementOptions...................... 54

English ix

AccountPolicies............................................. 55

BIOS Password Options (OmniBooks Only) . . . . . . . . . ............. 57

Win95/98Options ........................................... 58

CustomizingSecurityForYourInstalledBaseofPCs............... 59

ManagingSmartCards ..................................... 61

Using Smart Cards under Windows NT and Windows 2000 . . . . . . . . . . 62

InitializingFurtherSmartCards ............................... 63

Changing a Smart Card’sPIN .................................. 63

RestoringaSmartCardfromaRecoveryFile ..................... 64

Restoring a Smart Card Without the Recovery File . . . . . . . . . . . . . . . . . 65

Adding an Account to a Smart Card (Windows NT/Windows 2000). . . . 65

Removing an Account (Windows NT/Windows 2000) . . . . . . . . . . . . . . . 66

Changing an Account Password (Windows NT/Windows 2000) . . . . . . . 66

HPTopTools.............................................. 67

5 Troubleshooting

SmartCardTroubleshootingHelpZone....................... 70

IfYouDisconnecttheSmartCardReader ........................ 70

IfthePCFreezesAfterYouRestartIt ........................... 70

If the Smart Card’sPasswordisNotUpToDate ................... 70

WaitforService ............................................. 71

TroubleshootingTable........................................ 72

HPSmartCardDiagnosticsTool............................. 75

DiagnosticsOnlineHelp....................................... 75

UsingHPSmartCardDiagnostics .............................. 75

Documentation,HelpandSupport........................... 77

xEnglish

Autres manuels pour Brio BA200

Ce manuel convient aux modèles suivants

Table des matières

Autres manuels HP Logiciel

HP D6030A - NetServer - E50 Manuel utilisateur

HP t5300 - Thin Client Manuel utilisateur

HP dc5750 - Microtower PC Manuel utilisateur

HP Neoview SQL Manuel utilisateur

HP Integrity rx1600 Guide de référence rapide

HP D7171A - NetServer - LPr Manuel utilisateur

HP Data Protector A.06.11 Guide de configuration rapide

HP StorageWorks MSA 2/8 - SAN Switch Manuel utilisateur

HP ProLiant SL160s Manuel utilisateur

HP SysMan Manuel utilisateur

HP Brio BA200 Manuel utilisateur

HP 500 G2 Guide de sécurité

HP 1032 Manuel utilisateur

HP 4X - DDR InfiniBand Mezzanine HCA Mode d’emploi

HP Xw460c - ProLiant - Blade Workstation Manuel utilisateur

HP BL30p - ProLiant - 1 GB RAM Manuel utilisateur

HP Reliable Transaction Router Manuel utilisateur

HP ProBook 6445b - Notebook PC Manuel utilisateur

HP Surestore Disk Array 12h - And FC60 Manuel utilisateur

HP StorageWorks 4/8 - SAN Switch Mode d’emploi

HP StorageWorks 2000fc Manuel utilisateur

HP Deskjet 812c Mode d’emploi

HP BACKCOPY Manuel utilisateur

HP AA-RTDRB-TE Manuel utilisateur

Manuels Logiciel populaires d'autres marques

COMPRO

COMPRO COMPROFM Manuel utilisateur

Muratec

Muratec OFFICEBRIDGE ONLINE Manuel utilisateur

Oracle

Oracle Contact Center Anywhere 8.1 Manuel utilisateur

Adobe

Adobe 65007312 - Photoshop Lightroom Manuel

Avaya

Avaya NULL One-X for RIM Blackberry Manuel utilisateur

PS Audio

PS Audio PowerPlay Manuel du propriétaire

Brady

Brady LOCKOUT PRO 3.0 Manuel de service

Avaya

Avaya Interaction Center Manuel utilisateur

Texas Instruments

Texas Instruments TI-83 Plus Silver Edition Manuel

Novell

Novell GROUPWISE 8 - INTERNET AGENT Manuel utilisateur

Oracle

Oracle Application 9i Manuel utilisateur

Acer

Acer RDM Manuel utilisateur

Canon

Canon Vixia HF21 Manuel utilisateur

Canon

Canon ZR950 Manuel utilisateur

Samsung

Samsung Auto Backup Manuel utilisateur

Polycom

Polycom Vortex EF2201 Instructions d'installation et d'utilisation

Brocade Communications Systems

Brocade Communications Systems Brocade 8/12c Manuel utilisateur

Novell

Novell SP2 - S Mode d’emploi