How To Install the HP PC Encryption Software

There is no need to call IT Support or wait for help - use this easy Do IT Yourself guide to install the PC Encryption software to protect the sensitive data on your PC from unauthorized access.

3 November 2009

 Copyright 2009 Hewlett-Packard Development Company, L.P. Confidential computer software. Valid license from HP required for possession, use or copying. Consistent with FAR 12.211 and 12.212, Commercial Computer Software, Computer Software Documentation, and Technical Data for Commercial Items are licensed to the U.S. Government under vendor's standard commercial license. The information contained herein is subject to change without notice. The only warranties for HP products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. HP shall not be liable for technical or editorial errors or omissions contained herein. Microsoft, Windows, and Windows NT are U.S. registered trademarks of Microsoft Corporation.

HP Confidential

Contents
1. 2. 3. 4. 5.

Installation Overview ................................................................................................... 4 Check before your start ..................................................................................... 5 Install the Encryption software ........................................................................... 9 Configure PC Encryption ................................................................................. 19 Log On To The Encryption Log On Screen ..................................................... 22 Set Your Password Recovery Questions......................................................... 24

HP Confidential

Installation Overview

Pre-acquisition EDS Employees

Continue to use your current encryption method until further notice. You cannot use the PC Encryption Service at this time.

If you encounter problems during or after installation, please visit the PC Encryption Common Questions and Issues page.

Follow all the steps below in order to install PC Encryption. You are strongly recommended to perform all the steps in one session. The complete installation process usually takes around 15 minutes. 1. Check before your start 2. Install the Encryption software Restart your PC 3. Configure PC Encryption Restart your PC 4. Log On To The Encryption Log On Screen 5. Set Your Password Recovery Questions

Your PC must be connected to the HP network (either locally at an HP office or remotely over VPN) throughout the installation process. After the installation has completed, your PC does not need to be connected to the HP network at all times. However for ongoing management, HP Policy requires you to regularly connect your PC to the HP network at least every 30 days. You must restart your PC at least twice during the installation, so choose a time when you do not need your PC for other work. Remember to reconnect to the HP network after restarting for the first time in order for the installation to proceed.

HP Confidential

1. Check before your start

1. Check the criteria for installing PC Encryption on your PC. 2. Review the key changes that are introduced by installing the PC Encryption software. 3. Make sure that you have met the requirements shown on the following page for installing and using the PC Encryption service. 4. If the PC is shared by a number of users, then you must review these guidelines about using encryption on a shared PC. By default, after you install PC Encryption on a PC, only you are able to access the PC unless you give other users access. 5. Before you install PC Encryption, backup all HP business critical files stored on your PC. If you use the PC Backup service, manually perform a backup to ensure you have an up-to-date backup. Otherwise, you could copy the files to a location other than your PCs hard drive (such as an external hard drive, flash drive, or CD/DVD writer). Note. The data you copy to external media is not encrypted so keep the external media in a physically secure location. 6. If you encounter problems during or after installation, please visit the PC Encryption Common Questions and Issues page

HP Confidential

Requirement Supported Operating Systems

How to check

Your PC must be running one of the following supported operating systems: Windows XP with SP2/SP3 (32 bit only) Windows Vista with SP1/SP2 (32 bit only)

See this Get IT article for how to find out which operating system you are using.

The PC Encryption software cannot be installed on other operating systems (for example, Linux, Unix, Mac OS, Windows 7, Windows 2003, or Windows 2008). A waiver process is currently under review; however you still must follow the standard HP IT Security Cryptography policy to protect sensitive data. PC Encryption can also be installed on Windows Vista 64-bit, but you cannot get any Help Desk assistance because this is an unsupported version of the operating system. Before installing

You must have local administrator rights on the PC.

You are the administrator of the PC if you used your HP email address when: You set up your HP PC You reimaged with an HP image You retrofitted your EDS PC

Go to this Get IT article for more help.

You must have an HP email address. You use your primary HP email address to access an encrypted PC.

To find your primary HP email address: 1. Go to PeopleFinder and look up your own name. 2. Your primary email address is displayed under Primary E-Mail

You must be the owner or primary user of the PC; you must not install encryption on behalf of another user. After encryption, only you can access the PC, although you can grant access to the PC to other users.

HP Confidential

Your PC must not be configured to boot more than one operating system. Such non-PC COE configurations are commonly known as dual or multi boot and are not supported by HP IT.

When you start your PC, Windows should start immediately or you should see a menu that lists only one operating system.

Note. If you only see one option called Microsoft Windows Recovery Console in addition to the option for your operating system, then your PC is not a dual boot PC.

The PC you are encrypting must have only one internal hard drive. DO NOT install the encryption software if the PC has more than one internal drive. The root of your hard drive (C:\) must not be using the Windows compression feature. Right click on the drive in Windows Explorer and click on Properties. Unselect the Select (this) drive to save disk space check box. You can compress individual files and folders after installing PC Encryption.

You must remove all external drives (such as USB or Firewire hard drives and USB pen drives) from the PC before starting installation.

During installation

Your PC must connect to the HP network (directly at an HP office or remotely over VPN) throughout the installation process. After the installation has completed, your PC does not need to be connected to the HP network at all times. However for ongoing management, HP Policy requires you to regularly connect your PC to the HP network at least every 30 days.

After installation

After installing PC Encryption, do not hibernate your PC for 2 to 3 days after you first see the PC Encryption configuration completed message on your PC. After that initial period, you can use Hibernate mode as normal on a PC running the PC Encryption software.

HP Confidential

Minimum hardware requirements

Your PC must have the following minimum hardware specification: A minimum of 128 MB RAM At least 35 MB free hard disk space A Pentium compatible processor, multiprocessor (up to 32 way), dual-core and hyper threading processors, Pentiumcompatible processors such as AMD processors.

All standard HP PCs meet the minimum specification. See this Get IT article for how to find out whether your PC meets these hardware requirements.

HP Confidential

2. Install the Encryption software

1
Log on to Windows

Log on to Windows at your own PC as normal (usually you would use your HP domain user name and password). Only run the PC Encryption installation program on a PC that you own because the person who installs PC Encryption becomes the Encryption owner for the PC. Only the Encryption owner for a PC can permit other users to access the encrypted PC. You can log on to the PC using a local Windows user name to install PC Encryption, but you must perform some additional steps to complete the configuration after the installation program ends. The installation program guides you what to do.

HP Confidential

2
Start the installation program

Use HPs standard CM Application Self-Service Manager to install the McAfee Endpoint Encryption application if you are using a standard HP PC COE version of Windows XP or Windows Vista on your PC: 1. Close any applications you have been using on your PC. 2. Click the Intelligent Desktop Assistant icon in the Windows taskbar and then click CM Application Self-Service Manager on the menu. If you do not see this command on the menu and instead see an entry saying Self-Service Manager (Currently unavailable), then your PC is busy checking for updates or performing an update. Wait a few minutes until the check or update is complete and then try again. 3. Scroll down the CM Application Self-Service Manager window to find the application named McAfee Endpoint Encryption. 4. Click the right mouse button over the application and then click Install.

HP Confidential

10

If your PC is not running HPs standard PC COE version of Windows, follow these instructions for downloading asnd starting the installation program: 1. Download the installation files from http://intranet.hp.com/HPIT/GetIT/Encryption/Documents/ Software/encryptionpilot.zip 2. When prompted, click Save and save the encryptionpilot.zip file to your desktop.

3. Find the encryptionpilot.zip file on your desktop and double-click to open. The program used to open the file depends on your operating system and on whether you have a utility such as WinZip installed. For example, on Windows Vista if WinZip is installed you may see something like this:

4. Double-click on EEPC_Setup.exe.

HP Confidential

11

3
Confirm you have read and comply with requirements

When the installation program starts, it displays some important information:

1. Read the information carefully. 2. If you meet the requirements, select the check box and click Continue. 3. If you do not meet the requirements, click Cancel. You must not proceed with the installation if you do not meet the requirements.

HP Confidential

12

4
Respond to any messages from the installation program

After the installation program begins, it performs a number of checks before installing the software to ensure that PC Encryption can be installed successfully on your PC. If the program detects a problem, it displays a popup message. For example, it checks whether you have another full disk encryption product already installed on your PC and if it does it displays a message similar to the following:

The message outlines how to solve the problem, and usually directs you to a specific page in Get IT to find out more information. When you are referred to Get IT for help, you can find the relevant information as follows: 1. Sometimes you can click the OK button in the installation program message to directly open the relevant page in Get IT.

2. Otherwise, go to http://GetIT.hp.com and search using the first few words of the displayed message.

HP Confidential

13

5
Set your Encryption password

You MUST know your Encryption password in order to access your PC after PC Encryption has been fully configured. If you have never set a 6 digit Encryption password (usually the case if this is the first PC you have installed the PC Encryption software on), then the installation program now prompts you to set this password.

At New Password, type the 6 digit number you want to use for your Encryption password. The password must be exactly six digits and can only contain numbers. It is not the same as your Windows password. At Confirm new password, type the new password again. Click Next.

Providing the two fields match, the installation program continues:

If the passwords do not match or do not meet the 6 digit requirement, you are prompted to enter the new password again. If you have already set your Encryption password, then the program does not prompt you to set a new password. If the installation program cannot set your new password for some reason, it displays the message shown in step 6 below and you must set your own password at the HP Encryption Configuration portal.

HP Confidential

14

6
Confirm you know your Encryption log on details

You MUST know your Encryption password in order to access your PC after PC Encryption has been fully configured. Before installing the PC Encryption software and starting to encrypt your hard drive, you must confirm that you know your Encryption log on details.

Click Next to display the demo of the PC Encryption log on screen:

At User name, type your primary email address. At Password, type your Encryption password. This is the 6 digit number that you set that you set earlier. The password must be exactly six digits and can only contain numbers. It is not the same as your Windows password. Click OK.

HP Confidential

15

Providing you enter your correct user name and password, the following window appears:

Click Next to continue.

If you do not enter the correct user name and password, an error message is displayed; for example:

The message includes further instructions for how to find out the information you need. Click Try Again to return to the demonstration log on screen. Click Exit to cancel the installation.

HP Confidential

16

7
Wait for the PC Encryption software to be installed

After you have confirmed you know the correct Encryption user name and password, the PC Encryption software is installed on your PC (up to this point, no changes have been made to your PC):

. After a few minutes, the following screen appears to indicate that the software has been installed:

The message includes further instructions for how to find out the information you need. Click Try Again to return to the demonstration log on screen. Click Exit to cancel the installation.

HP Confidential

17

8
Restart your PC when prompted

You may see the following message before you are prompted to restart your PC if the installation program was unable to make all the necessary configuration changes:

After you restart your PC, follow the on-screen instructions to manually configure your PC. A shortcut to a Get IT page containing full instructions is also placed on your Windows desktop. Click Close to proceed if you see this message. After the installation program has finished, you are prompted to restart your PC:

1. Click Finish to continue. 2. If you are installing the software using the CM Application Self Service Manager program, you are then prompted again to restart your PC:

Click OK and your PC is automatically restarted. 3. If you are installing the software using the encryption.zip package you downloaded at step 1, then you must restart your PC manually.

HP Confidential

18

3. Configure PC Encryption

1
Log on to Windows as usual

After you restart your PC, you will not yet see the new Encryption log on screen. Some final configuration actions must take place first, and you must then restart your PC at least once more. 1. After restarting your PC, log on to Windows using your usual Windows user name and password.

The following message normally appears the first time you restart your PC:

Data on your PC is not yet encrypted. Click Close to close the window.

HP Confidential

19

Immediately after logging on to Windows, you may see this prompt if the installation program was unable to make all the necessary configuration changes:

Take a note of the PC name and use the links in the message to manually configure your PC. Click Close to close the prompt window. You can find a shortcut to the instructions on your Windows desktop.

2
Ensure you are connected to the HP Network

Ensure your PC is connected to the HP network after restarting your PC. If you are at an HP office, make sure the network cable remains connected to your PC. If you installed the PC Encryption software remotely over a VPN connection, remember to connect using the Remote Access to HP Network software after restarting your PC.

3
Follow any on-screen instructions

Normally the configuration required for PC Encryption proceeds automatically in the background and you can use your PC as normal while this configuration takes place.

4
Remain logged on and connected to the HP network for 20 minutes

Remain logged on to your PC and leave it connected to the HP network for at least 20 minutes after following any on-screen instructions.

HP Confidential

20

5
Look for the Configuration Complete message

The following message appears when PC Encryption configuration is complete:

After this window appears, whenever you turn on or restart your PC you are prompted for your Encryption user name and password before you can log on to Windows. Click Close to close this window. If you do not see this message after following all on-screen instructions and then leaving your PC connected to the HP network for at least 20 minutes, follow these instructions at Get IT.

6
Restart your PC

Close any open files and programs, and then restart your PC.

HP Confidential

21

4. Log On To The Encryption Log On Screen

1
Log on to the Encryption log on screen

When you next restart your PC after seeing the Encryption Configuration Complete message, the Encryption Log On Screen is displayed:

From now on this screen appears every time you switch on or restart your PC.

HP Confidential

22

2
Type your Encryption user name and Encryption password

1. At User Name, type your primary HP email address. If you only have one email address, then that is your primary address. If you have set up more than one email address, only one of the addresses is your primary address. To find your primary address: Go to PeopleFinder: http://peoplefinder.portal.hp.com/peoplefinder/. Look up your own name. Your primary email address is displayed under Primary E-Mail.

2. At Password, type your 6 digit Encryption password (numbers only). You can reset your password if you ever forget it. Your Encryption password is different from the password you use to log on to Windows. 3. Click OK to proceed.

HP Confidential

23

5. Set Your Password Recovery Questions

1
Set three password recovery questions and answers

If this is the first PC that have encrypted, you are now prompted to select and answer three recovery questions. If you forget your encryption password in the future, you can recover it by answering these three questions. 1. Select a question from the drop-down list and then type in the answer.

When entering an answer, the question is sometimes hidden from view. If you need to recover your encryption password, you must enter the answers exactly as you type them when you set them up for the first time. Where possible use a simple one word for each answer. Answers are not case sensitive. Ensure your answers are memorable; if you forget the answers, support assistance is needed to reset a password. Once you have set up your answers do not write them down and store them with your PC!

HP Confidential

24

2. Follow the on-screen instructions to select and answer three questions. 3. A confirmation window appears after you have answered three questions.

Click Finish to continue.

2
Log on to Windows

The Windows operating system then starts up in the normal way. When the Windows log on screen appears, enter your Windows user name and HP password as you have always done.

You do not use your 6 digit Encryption password on the Windows log on screen.

HP Confidential

25

3
Use your PC as usual

PC Encryption is now fully configured on your PC and you can use your PC as usual. It can now take several hours for all the data on your hard drive to be encrypted. You can continue to use your PC as normal while your hard drive is encrypted, although you may notice some performance degradation until the encryption has completed.
Turning off your PC during the initial encryption If possible, keep your PC turned on until the initial encryption completes. If you need to turn your PC off before the initial encryption completes, ensure that you shut it down cleanly using the Windows Shut Down option. Encryption resumes from where it stopped the next time you restart your PC and log on to Windows.

Some useful things to know: If there are other users who need to use your PC, you must authorize each user before they can log on to your PC. You are recommended to do this now to avoid delays when they need to use it. If you ever forget your password, you can find instructions about how to recover on the bottom of the Encryption log on screen itself.

HP Confidential

26