encryption install instructions

8/3/2019 Encryption Install Instructions

http://slidepdf.com/reader/full/encryption-install-instructions 1/26

3 November 2009

How To Install the HP PC Encryption SoftwareThere is no need to call IT Support or wait for help - use thiseasy Do IT Yourself guide to install the PC Encryption software toprotect the sensitive data on your PC from unauthorized access.



HP Confidential 2

© Copyright 2009 Hewlett-Packard Development Company, L.P.

Confidential computer software. Valid license from HP required for possession, use or copying.

Consistent with FAR 12.211 and 12.212, Commercial Computer Software, Computer Software

Documentation, and Technical Data for Commercial Items are licensed to the U.S. Government under

vendor's standard commercial license.

The information contained herein is subject to change without notice. The only warranties for HP products

and services are set forth in the express warranty statements accompanying such products and services.

Nothing herein should be construed as constituting an additional warranty. HP shall not be liable for

technical or editorial errors or omissions contained herein.

Microsoft, Windows, and Windows NT are U.S. registered trademarks of Microsoft Corporation.



HP Confidential 3

Contents

Installation Overview ................................................................................................... 4

1. Check before your start ..................................................................................... 5 2. Install the Encryption software ........................................................................... 9 3. Configure PC Encryption ................................................................................. 19 4. Log On To The Encryption Log On Screen ..................................................... 22 5. Set Your Password Recovery Questions......................................................... 24



HP Confidential 4

Installation Overview

If you encounter problems during or after installation, please visit the PC

Encryption Common Questions and Issues page.

Follow all the steps below in order to install PC Encryption. You are strongly recommended to perform all

the steps in one session. The complete installation process usually takes around 15 minutes.

1. Check before your start

Restart your PC

2. Install the Encryptionsoftware

Restart your PC

3. Configure PC Encryption

4. Log On To The EncryptionLog On Screen

5. Set Your Password RecoveryQuestions

Your PC must be connected to the HP network (either locally at an HP office or

remotely over VPN) throughout the installation process. After the installation hascompleted, your PC does not need to be connected to the HP network at all times.

However for ongoing management, HP Policy requires you to regularly connect your PC

to the HP network at least every 30 days.

You must restart your PC at least twice during the installation, so choose a time when you do not need

your PC for other work. Remember to reconnect to the HP network after restarting for the first time in

order for the installation to proceed.

Pre-acquisition EDS Employees

Continue to use your current encryption method until further notice. You cannot use

the PC Encryption Service at this time.

http://intranet.hp.com/HPIT/GetIT/Encryption/Pages/EncryptionHelp.aspx



http://intranet.hp.com/HPIT/GetIT/Encryption/



http://intranet.hp.com/HPIT/GetIT/PCStandards/Pages/Policy.aspx








HP Confidential 5

1. Check before your start

1. Check the criteria for installing PC Encryption on your PC.

2. Review the key changes that are introduced by installing the PC Encryption software.

3. Make sure that you have met the requirements shown on the following page for installing and using

the PC Encryption service.4. If the PC is shared by a number of users, then you must review these guidelines about using

encryption on a shared PC. By default, after you install PC Encryption on a PC, only you are able to

access the PC unless you give other users access.

5. Before you install PC Encryption, backup all HP business critical files stored on your PC.

If you use the PC Backup service, manually perform a backup to ensure you have an up-to-date

backup. Otherwise, you could copy the files to a location other than your PC’s hard drive (such as an

external hard drive, flash drive, or CD/DVD writer).

Note. The data you copy to external media is not encrypted so keep the external media in a

physically secure location.

6. If you encounter problems during or after installation, please visit the PC Encryption Common

Questions and Issues page

http://intranet.hp.com/HPIT/GetIT/Encryption/Pages/ExceptionCriteria.aspx



http://intranet.hp.com/HPIT/GetIT/Encryption/Pages/Overview.aspx



http://intranet.hp.com/HPIT/GetIT/encryption/Pages/overview.aspx



http://intranet.hp.com/HPIT/GetIT/PCBackup/Pages/index.aspx



http://itsupport.hp.com/portal/site/sg/documentdetail?docid=KM000388

















HP Confidential 6

Requirement How to check

Supported Operating Systems

Your PC must be running one of the following

supported operating systems:

• Windows XP with SP2/SP3 (32 bit only)• Windows Vista with SP1/SP2 (32 bit only)

The PC Encryption software cannot be

installed on other operating systems (for

example, Linux, Unix, Mac OS, Windows 7,

Windows 2003, or Windows 2008). A waiver

process is currently under review; however

you still must follow the standard HP IT

Security Cryptography policy to protect

sensitive data.

PC Encryption can also be installed on

Windows Vista 64-bit, but you cannot get any

Help Desk assistance because this is an

unsupported version of the operating system.

See this Get IT article for how to find out which

operating system you are using.

Before installing

You must have local administrator rights onthe PC.

You are the administrator of the PC if you used

your HP email address when:

• You set up your HP PC

• You reimaged with an HP image

• You retrofitted your EDS PC

Go to this Get IT article for more help.

You must have an HP email address. You use

your primary HP email address to access anencrypted PC.

To find your primary HP email address:

1. Go to PeopleFinder and look up your ownname.

2. Your primary email address is displayedunder Primary E-Mail

You must be the owner or primary user of the

PC; you must not install encryption on behalf

of another user.

After encryption, only you can access the PC,

although you can grant access to the PC to

other users.

http://enhanced1.sharepoint.hp.com/teams/EA/Lists/Policy/DispForm.aspx?ID=80&Source=http://enhanced1.sharepoint.hp.com/teams/EA/Lists/Policy/Policy%2520and%2520Standards.aspx









http://peoplefinder.portal.hp.com/peoplefinder/



http://intranet.hp.com/HPIT/GetIT/Encryption/Pages/SharingPC.aspx













HP Confidential 7

Your PC must not be configured to boot more

than one operating system. Such non-PC COEconfigurations are commonly known as dual or

multi boot and are not supported by HP IT.

When you start your PC, Windows should

start immediately or you should see a menuthat lists only one operating system.

Note. If you only see one option called

Microsoft Windows Recovery Console in

addition to the option for your operating system,then your PC is not a dual boot PC.

The PC you are encrypting must have onlyone internal hard drive. DO NOT install the

encryption software if the PC has more thanone internal drive.

The root of your hard drive (C:\) must not be

using the Windows compression feature.

Right click on the drive in Windows Explorer and

click on Properties. Unselect the Select (this)drive to save disk space check box.

You can compress individual files and foldersafter installing PC Encryption.

You must remove all external drives (such as

USB or Firewire hard drives and USB pen

drives) from the PC before starting installation.

During installation

Your PC must connect to the HP network

(directly at an HP office or remotely over VPN)

throughout the installation process. After the

installation has completed, your PC does not

need to be connected to the HP network at all

times. However for ongoing management, HP

Policy requires you to regularly connect your

PC to the HP network at least every 30 days.

After installation

After installing PC Encryption, do not hibernate

your PC for 2 to 3 days after you first see the

PC Encryption configuration completedmessage on your PC.

After that initial period, you can use Hibernate

mode as normal on a PC running the PC

Encryption software.













HP Confidential 8

Minimum hardware requirements

Your PC must have the following minimumhardware specification:

• A minimum of 128 MB RAM

• At least 35 MB free hard disk space

• A Pentium compatible processor, multi-processor (up to 32 way), dual-core andhyper threading processors, Pentium-

compatible processors such as AMDprocessors.

All standard HP PCs meet the minimumspecification.

See this Get IT article for how to find out whetheryour PC meets these hardware requirements.

http://intranet.hp.com/HPIT/GetIT/PCStandards/Pages/StandardPCs.aspx










HP Confidential 9

2. Install the Encryption software

1

Log on to Windows

Log on to Windows at your own PC as normal (usually you would use your HP

domain user name and password).

Only run the PC Encryption installation program on a PC that

you own because the person who installs PC Encryption

becomes the Encryption owner for the PC. Only the

Encryption owner for a PC can permit other users to access

the encrypted PC.

You can log on to the PC using a local Windows user name to install PC

Encryption, but you must perform some additional steps to complete the

configuration after the installation program ends. The installation program

guides you what to do.



HP Confidential 10

2

Start the installation

program

Use HP’s standard CM Application Self-Service Manager to install the McAfee

Endpoint Encryption application if you are using a standard HP PC COE

version of Windows XP or Windows Vista on your PC:

1. Close any applications you have been using on your PC.

2. Click the Intelligent Desktop Assistant icon in the Windows taskbar

and then click CM Application Self-Service Manager on themenu.

If you do not see this command on the menu and instead see an entrysaying Self-Service Manager (Currently unavailable), then your PC isbusy checking for updates or performing an update. Wait a few minutesuntil the check or update is complete and then try again.

3. Scroll down the CM Application Self-Service Manager window to find the

application named McAfee Endpoint Encryption.

4. Click the right mouse button over the application and then click Install.



HP Confidential 12

3

Confirm you have

read and comply with

requirements

When the installation program starts, it displays some important information:

1. Read the information carefully.

2. If you meet the requirements, select the check box and click Continue.

3. If you do not meet the requirements, click Cancel.

You must not proceed with the installation if you do not

meet the requirements.



HP Confidential 13

4

Respond to any

messages from the

installation program

After the installation program begins, it performs a number of checks before

installing the software to ensure that PC Encryption can be installed

successfully on your PC.

If the program detects a problem, it displays a popup message. For example, it

checks whether you have another full disk encryption product already installedon your PC and if it does it displays a message similar to the following:

The message outlines how to solve the problem, and usually directs you to a

specific page in Get IT to find out more information. When you are referred to

Get IT for help, you can find the relevant information as follows:

1. Sometimes you can click the OK button in the installation program message

to directly open the relevant page in Get IT.

2. Otherwise, go to http://GetIT.hp.com and search using the first few words of

the displayed message.

http://getit.hp.com/






HP Confidential 14

5

Set your Encryption

password

You MUST know your Encryption password in order to access

your PC after PC Encryption has been fully configured.

If you have never set a 6 digit Encryption password (usually the case if this is

the first PC you have installed the PC Encryption software on), then the

installation program now prompts you to set this password.

• At New Password, type the 6 digit number you want to use for your

Encryption password. The password must be exactly six digits and can

only contain numbers. It is not the same as your Windows password.

• At Confirm new password, type the new password again.

• Click Next.

Providing the two fields match, the installation program continues:

• If the passwords do not match or do not meet the 6 digit requirement,you are prompted to enter the new password again.

• If you have already set your Encryption password, then the program

does not prompt you to set a new password.

• If the installation program cannot set your new password for some

reason, it displays the message shown in step 6 below and you must

set your own password at the HP Encryption Configuration portal.



HP Confidential 15

6

Confirm you know

your Encryption

log on details

You MUST know your Encryption password in order to access

your PC after PC Encryption has been fully configured.

Before installing the PC Encryption software and starting to encrypt your hard

drive, you must confirm that you know your Encryption log on details.

Click Next to display the demo of the PC Encryption log on screen:

• At User name, type your primary email address.

• At Password, type your Encryption password. This is the 6 digit

number that you set that you set earlier. The password must be exactly

six digits and can only contain numbers. It is not the same as your

Windows password.

• Click OK.



HP Confidential 16

Providing you enter your correct user name and password, the following window

appears:

Click Next to continue.

If you do not enter the correct user name and password, an error message is

displayed; for example:

The message includes further instructions for how to find out the information

you need. Click Try Again to return to the demonstration log on screen. Click

Exit to cancel the installation.



HP Confidential 17

7

Wait for the PC

Encryption software

to be installed

After you have confirmed you know the correct Encryption user name and

password, the PC Encryption software is installed on your PC (up to this point,

no changes have been made to your PC):

.

After a few minutes, the following screen appears to indicate that the software

has been installed:

The message includes further instructions for how to find out the information

you need. Click Try Again to return to the demonstration log on screen. Click

Exit to cancel the installation.



HP Confidential 18

8

Restart your PC

when prompted

You may see the following message before you are prompted to

restart your PC if the installation program was unable to make all

the necessary configuration changes:

After you restart your PC, follow the on-screen instructions to

manually configure your PC. A shortcut to a Get IT page containing

full instructions is also placed on your Windows desktop.

Click Close to proceed if you see this message.

After the installation program has finished, you are prompted to restart your PC:

1. Click Finish to continue.

2. If you are installing the software using the CM Application Self Service

Manager program, you are then prompted again to restart your PC:

Click OK and your PC is automatically restarted.

3. If you are installing the software using the encryption.zip package you

downloaded at step 1, then you must restart your PC manually.



HP Confidential 19

3. Configure PC Encryption

1

Log on to Windows

as usual

After you restart your PC, you will not yet see the new Encryption

log on screen. Some final configuration actions must take place

first, and you must then restart your PC at least once more.

1. After restarting your PC, log on to Windows using your usual Windows username and password.

The following message normally appears the first time you restart your PC:

Data on your PC is not yet encrypted. Click Close to close the window.



HP Confidential 20

Immediately after logging on to Windows, you may see this

prompt if the installation program was unable to make all the

necessary configuration changes:

Take a note of the PC name and use the links in the messageto manually configure your PC.

Click Close to close the prompt window. You can find a

shortcut to the instructions on your Windows desktop.

2

Ensure you are

connected to the HP

Network

Ensure your PC is connected to the HP network after restarting your PC.

• If you are at an HP office, make sure the network cable remains

connected to your PC.

• If you installed the PC Encryption software remotely over aVPN connection, remember to connect using the Remote

Access to HP Network software after restarting your PC.

3

Follow any on-screen

instructions

Normally the configuration required for PC Encryption proceeds automatically in

the background and you can use your PC as normal while this configuration

takes place.

4Remain logged on

and connected to the

HP network for 20

minutes

Remain logged on to your PC and leave it connected to the HP network for atleast 20 minutes after following any on-screen instructions.



HP Confidential 21

5

Look for the

Configuration

Complete message

The following message appears when PC Encryption configuration is complete:

After this window appears, whenever you turn on or restart your PC you are

prompted for your Encryption user name and password before you can log on to

Windows. Click Close to close this window.

If you do not see this message after following all on-screen instructions and

then leaving your PC connected to the HP network for at least 20 minutes,

follow these instructions at Get IT.

6

Restart your PC

Close any open files and programs, and then restart your PC.







HP Confidential 22

4. Log On To The Encryption Log On

Screen

1

Log on to the

Encryption log on

screen

When you next restart your PC after seeing the Encryption Configuration

Complete message, the Encryption Log On Screen is displayed:

From now on this screen appears every time you switch on or

restart your PC.



HP Confidential 23

2

Type your

Encryption user

name and Encryption

password

1. At User Name, type your primary HP email address.

If you only have one email address, then that is your primary address. If you

have set up more than one email address, only one of the addresses is your

primary address. To find your primary address:

•

Go to PeopleFinder: http://peoplefinder.portal.hp.com/peoplefinder/ . • Look up your own name.

• Your primary email address is displayed under Primary E-Mail.

2. At Password, type your 6 digit Encryption password (numbers only).

You can reset your password if you ever forget it.

Your Encryption password is different from the password

you use to log on to Windows.

3. Click OK to proceed.















HP Confidential 24

5. Set Your Password Recovery

Questions

1

Set three passwordrecovery questions

and answers

If this is the first PC that have encrypted, you are now prompted to select and

answer three recovery questions. If you forget your encryption password in thefuture, you can recover it by answering these three questions.

1. Select a question from the drop-down list and then type in the answer.

• When entering an answer, the question is sometimes hidden

from view.

• If you need to recover your encryption password, you mustenter the answers exactly as you type them when you set

them up for the first time. Where possible use a simple one

word for each answer. Answers are not case sensitive.

• Ensure your answers are memorable; if you forget the

answers, support assistance is needed to reset a password.

• Once you have set up your answers do not write them down

and store them with your PC!



HP Confidential 25

2. Follow the on-screen instructions to select and answer three questions.

3. A confirmation window appears after you have answered three questions.

Click Finish to continue.

2

Log on to Windows

The Windows operating system then starts up in the normal way. When the

Windows log on screen appears, enter your Windows user name and HP

password as you have always done.

You do not use your 6 digit Encryption password on the Windows log on screen.



3

Use your PC as usual

PC Encryption is now fully configured on your PC and you can use your PC as

usual.

It can now take several hours for all the data on your hard drive to be encrypted.

You can continue to use your PC as normal while your hard drive is encrypted,

although you may notice some performance degradation until the encryption

has completed.

Turning off your PC during the initial encryption

If possible, keep your PC turned on until the initial encryption

completes. If you need to turn your PC off before the initial

encryption completes, ensure that you shut it down cleanly using the

Windows Shut Down option. Encryption resumes from where it

stopped the next time you restart your PC and log on to Windows.

Some useful things to know:

• If there are other users who need to use your PC, you

must authorize each user before they can log on to your

PC. You are recommended to do this now to avoid

delays when they need to use it.

• If you ever forget your password, you can find

instructions about how to recover on the bottom of theEncryption log on screen itself.

encryption install instructions

Documents