HP ProtectTools security software 2011 - Technical white paper

Security software components for HP ProtectTools
The modular architecture of the HP ProtectTools Security Manager enables add-on components to be
selectively installed by the end user or IT administrator. This provides a high degree of flexibility to
customize HP ProtectTools depending on security needs and the underlying hardware configuration.
Each add-on element is a self contained security application providing targeted security functionality.
Integrated into HP ProtectTools Security Manager, these applications form a holistic security solution.
They are specifically designed to work with and complement each other. These elements include:
 Face Recognition for HP ProtectTools
 Device Access Manager for HP ProtectTools
 Drive Encryption for HP ProtectTools
 Embedded Security for HP ProtectTools
 File Sanitizer for HP ProtectTools
1
 Computrace® LoJack Pro for HP ProtectTools
2
 Privacy Manager for HP ProtectTools
Going forward, as new needs are identified, HP expects to continue to expand its PC security
offerings with additional modules for the HP ProtectTools Security Manager.
Face Recognition for HP ProtectTools
Face Recognition for HP ProtectTools provides a new level of convenience for a high level of
protection. This feature is easy to set up and use, provides multifactor authentication into Windows,
and is integrated with Single Sign-on capability. Face Recognition is an innovative technology that
allows you to log in to your notebook pc and all your favorite websites using a single sign-on. You
can login simply by looking at the webcam on the PC, so there is no need to recall dozens of user
names and passwords. At most sites that require a password, a window pops up over your browser
and gives you the option to log in using Face Recognition.
HP recommends that a minimum of two factors be used to create a more secure environment. HP
ProtectTools recommends protecting face scenes with a PIN or with Bluetooth phone pairing, which
can be combined with Face Recognition to provide exceptional security.
Face Recognition for HP ProtectTools was developed in relationship with Cogent, a leading
biometric solutions provider.
Device Access Manager for HP ProtectTools
Device Access Manager for HP ProtectTools speaks to HP’s strong commitment to security and its
ability to respond to customer needs with innovative solutions. A common assumption with today’s PC
usage model is that users who are authorized to log on to a personal computer and access sensitive
data are also able to copy that information. In reality, this is not always the case. Companies may
need to allow users to view sensitive data, but restrict their ability to copy that data. Device Access
Manager for HP ProtectTools solves that problem. In doing so, it enables a new usage model for
personal computing devices.
Device Access Manager for HP ProtectTools has several configuration options:
 Simple Configuration
 Device Class Configuration
 Just-in-time authentication (JITA) Configuration
1
For the use cases outlined in the DOD 5220.22-M Supplement.
2
Tracking and recovery is supported by an embedded BIOS agent on HP business notebooks, which is shipped turned off, and must be activated
by the purchase of a subscription for terms ranging from one to five years via LoJack Pro. Service is limited, check with Absolute Software for
availability outside the U.S., certain conditions apply. For full details visit:http://www.absolute.com/products/lojackforlaptops.