HP OmniBook 7100 User Manual
HP OmniBook 7100 User Manual

HP OmniBook 7100 User Manual

For omnibook
Hide thumbs Also See for OmniBook 7100:

Advertisement

®
HP Encryption Smart Card
Security System
User's Guide

Advertisement

Table of Contents
loading

Summary of Contents for HP OmniBook 7100

  • Page 1 ® HP Encryption Smart Card Security System User’s Guide...
  • Page 2: Limited Warranty

    Copyright and trademark information This document contains proprietary information which is protected by copyright. All rights reserved. No part of this document may be photocopied, reproduced or translated into another language without the pri- or written consent of Hewlett-Packard company. Copyright Hewlett-Packard Company, 1998.
  • Page 3 MENT SHALL GOVERN THE USE OF ALL SOFTWARE THAT IS PROVIDED TO YOU, THE CUSTOMER, AS PART OF THE HP COMPUTER PRODUCT. IT SHALL SUPERSEDE ANY NON- HP SOFTWARE LICENSE TERMS THAT MAY BE FOUND ON-LINE, OR IN ANY DOCUMENTA- TION OR OTHER MATERIALS CONTAINED IN THE COMPUTER PRODUCT PACKAGING.
  • Page 4 ROM: (i) The product recovery CD-ROM and/or support utility software may only be used for restoring the hard disk of the HP computer with which the product recovery CD-ROM was originally provided. (ii) The use of any operating system software by Microsoft contained in any such product recovery CD- ROM shall be governed by the Microsoft End User License Agreement (EULA).
  • Page 5: Table Of Contents

    Initializing your smart card and creating a recovery file ......1-10 Using your HP Encryption Smart Card Security System .....1-13 Introduction .
  • Page 6 Contents...
  • Page 7: Understanding The Hp Encryption Smart Card Security System

    Therefore only the holder of the key can take the unintelligible data and make it intelligible. The type of encryption used in the HP Encryption System provides confidentiality, as no one but the holder of the key can read the data.
  • Page 8: How Does The Hp Encryption Smart Card Security System Work

    How does the HP Encryption Smart Card Security System work? How does the HP Encryption Smart Card Security System work? The Encryption Smart Card Security System provides two security features: • Data encryption on your OmniBook’s hard drive (Windows 95 and Windows NT).
  • Page 9 How does the HP Encryption Smart Card Security System work? Ridebis, et licet rideas. Ego ille quem nosti apros et quidem pulcherrimos cepi. Ipse? inquis. Ipse; non tamen ut omnino ab iner- tia mea et quete discederem. Ad retia sede-...
  • Page 10 How does the HP Encryption Smart Card Security System work?
  • Page 11: Setting Up Your Omnibook To Use A Smart Card

    To use the Encryption Smart Card Security System, you need: • An HP OmniBook Model 800, 2000, 3000, 5000, 4100, 7100, Sojourn or later with Microsoft Windows 95 OSR2 or later installed An HP OmniBook Model 2100, 3000, 4100, 7100, Sojourn or later with Microsoft Windows NT 4.0 SP3 or later installed (you will need at least 2 NT...
  • Page 12: Installing The Encryption System Software And Smart Card Reader

    1 Start your OmniBook (log on as Administrator for Windows NT). You should have the Windows desktop displayed 2 Insert the HP Encryption System Software CD-ROM into the CD-ROM drive of your OmniBook. 3 Start your Windows program installation utility (Start, Settings, Control panel, Add/Remove Programs) and install the Encryption Smart Card Security System software from the CD-ROM.
  • Page 13: Smart Card Logon With Windows Nt

    Smart card logon with Windows NT With Windows NT, the Encryption Smart Card Security System provides the additional security feature of smart card logon. This makes the logon procedure more secure as you need both your NT password and your smart card during logon. You must register your smart card with your user name and password during the NT logon process.
  • Page 14 The first time you log on after installation, you will be in Verification mode. Verification Mode When you first set up your HP Encryption System to work with NT, it is put into an insecure “Verification” mode, which allows you to continue to access your OmniBook even if there are problems with accessing your smart card reader or smart card.
  • Page 15 Smart card logon with Windows NT Note For security reasons, there is no way to return to this verification mode once you have selected to remove it. You will now need to initialize each card that you wish to use for file encryption.
  • Page 16: Initializing Your Smart Card And Creating A Recovery File

    OmniBook. To initialize your smart card 1 Make sure your smart card is inserted in the smart card reader. 2 Open the HP Encryption Smart Card Security System Manager, and select the Smart Card tab. 1-10...
  • Page 17 3 In the Smart Card page, click on Initialize to start the initialization process, and generate your encryption key. You will now be asked to enter a PIN number for the smart card. 4 Enter an 8-character PIN and confirm the PIN by retyping it exactly in the Confirm PIN field.
  • Page 18 Initializing your smart card and creating a recovery file If you wish to define another location for the recovery file, click on ... to select another directory. Then enter the name of the recovery file and the password to prevent unauthorized access to the file.
  • Page 19: Using Your Hp Encryption Smart Card Security System

    Getting Information In the Information page of the HP Encryption System manager, you can easily see where the Secure folder is located. This location was specified during the product installation and cannot be changed. Other information available includes the status of the smart card and smart card reader and the status of the products software components.
  • Page 20: Entering The Pin

    Entering the PIN Entering the PIN Each time you insert a new smart card, or remove and insert the same smart card, you will be asked to enter its PIN. When the Encryption System detects the card, it opens a PIN dialog box. Enter the smart card’s PIN. Once the PIN has been correctly entered, you will have access to your Secure folder.
  • Page 21: Nt Workstation Lock (Screen Lock)

    NT Workstation lock (screen lock) The Logon tab and page are only accessible when you are logged on as the NT Administrator. The workstation lock is located in the lower part of the Logon page. Check the box to lock the workstation should the session owner’s smart card be removed.
  • Page 22 Using the Secure Folder Storing existing files in the Secure folder Use your application or file manager to: • Save as... • Copy to... • Move (using drag and drop) from your normal file structure to your Secure folder. Note that both Save as and Copy to will leave a copy in the unsecure part of your hard disk which presents a potential security risk.
  • Page 23: Changing Your Smart Card's Pin

    Changing your Smart Card’s PIN Changing your Smart Card’s PIN You can change the PIN of your smart card at any time using the Encryption System Manager. In the center section of the Smart Card page, click on Change PIN. The Change PIN dialog box will open: In the Change PIN dialog box you are asked for the old PIN and the new PIN (and confirmation).
  • Page 24: If You Forget Your Pin

    If you forget your PIN If you forget your PIN If you forget your PIN, you should be aware that seven unsuccessful attempts at entering the PIN will result in your smart card being locked. If your organization does not have a centralized Smart Card Management System (SCMS) and an SCMS Administrator who can unlock your card, your card is now unusable and should be disposed of following your local environmental laws.
  • Page 25: Creating A Replacement Smart Card

    Creating a replacement smart card If you lose your smart card If you lose your smart card or it becomes damaged, you will need to create a replacement smart card to allow you to access and decrypt the files stored in your Secure folder on your OmniBook.
  • Page 26 Creating a replacement smart card You are now prompted to enter the name of the recovery file and the recovery file password. 6 Click on ... to go to the folder containing the recovery file (or type the full path name in the filename field) and enter the password for the recovery file.
  • Page 27 To create a replacement smart card for use with Windows NT Note Since you can no longer use your smart card to access your OmniBook, you will need the NT Administrator smart card to regain access. 1 Insert the Administrator smart card in the smart card reader, and log on as the NT Administrator.
  • Page 28 Creating a replacement smart card account. (This completes the steps necessary to register your smart card for Windows NT logon). 8 Locate the recovery file (it may be on a diskette). 9 Open the Encryption Smart Card Security System Manager program (if it is not already running) and click on the Smart Card tab.
  • Page 29: Troubleshooting

    Troubleshooting General Troubleshooting tips and tricks In the case of a problem with your HP Encryption Smart Card Security System, the first place to check is the Information page of the Encryption System Manager. In this page you will find:...
  • Page 30 General Troubleshooting tips and tricks However, if there is a problem, it could be: • smart card present but badly initialized Solution: re-initialize your smart card as detailed in “To initialize your smart card” on page 10 • smart card present but not initialized Solution: initialize your smart card as detailed in “To initialize your smart card”...
  • Page 31 The software components status should be: • Running (except for the Authentication Module (GINA) which is stateless, and marked n/a) However, in the case of a problem, it could be: • Stopped Solution: If any components are marked as stopped, you will need to restart them (reboot the OmniBook or start them using the file manager - double click on the file name).
  • Page 32: Troubleshooting Questions And Answers

    Troubleshooting questions and answers Troubleshooting questions and answers Problem I have lost my smart card I cannot log on to my NT account I could not remember my PIN, I tried to enter it seven times and now my card no longer works 1-26 Explanation If you are using Windows NT,...
  • Page 33 A message tells me that access to the smart card is denied. Troubleshooting questions and answers Explanation Action The HP Encryption System Make sure your smart card is Manager is unable to retrieve properly inserted into the smart information stored on the smart card reader and the correct PIN card.
  • Page 34 Contact your dealer, or contact Hewlett-Packard - see the OmniBook Support and Service booklet. Make sure you have the software version number (in the “General” page of the HP Encryption System Manager) and all of the information (including the version of all the installed components) in the “Software Component Status”...

This manual is also suitable for:

Encryption smart card

Table of Contents