Acer Commercial Solution ProShield Training · PDF file– Click “Next” to set...
Transcript of Acer Commercial Solution ProShield Training · PDF file– Click “Next” to set...
ACER CONFIDENTIAL
Acer ProShield
Solution Training v1.1
ACER CONFIDENTIAL
• ProShield Initialization
• BIOS Settings
• Credential Manager
• Pre-Boot Authentication
• Data Protection
• Data Removal
Agenda
ACER CONFIDENTIAL
ProShield Initialization
BIOS Settings
Credential Manager
Pre-Boot Authentication
Data Protection
Data Removal
ACER CONFIDENTIAL 3
ProShield Initialization (1/21)
It requires users to perform the initialization while executing ProShield at the first time.
ACER CONFIDENTIAL 4
ProShield Initialization (2/21)
ProShield Setup Wizard.
ACER CONFIDENTIAL 5
ProShield Initialization (3/21)
TPM security chip is disabled while initialization
– If click "Yes", enable TPM and reboot automatically.
– If click "No", continue to do initial wizard without TPM protection
ACER CONFIDENTIAL 6
ProShield Initialization (4/21)
Reboot the computer is required after succeeded to enable TPM.
– After reboot, ProShield initial wizard will launch automatically from start page.
ACER CONFIDENTIAL 7
ProShield Initialization (5/21)
Set ProShield password
1. Enter the ProShield password
2. Confirm the password
3. Enter password hint
4. Click Next to save changes.
ACER CONFIDENTIAL 8
ProShield Initialization (6/21)
ProShield initialization is finished for TPM and ProShield password.
– Click “Next” to set Fingerprint Registration, Pre-Boot Authentication and Personal Secure Drive
– Click “Finish” to leave initialization wizard
ACER CONFIDENTIAL 9
ProShield Initialization (7/21)
Introduction page of fingerprint enrollment
ACER CONFIDENTIAL 10
ProShield Initialization (8/21)
Request to confirm the Windows account password for fingerprint registration
ACER CONFIDENTIAL 11
ProShield Initialization (9/21)
Select the finger you wish to register by clicking the box on top of it
ACER CONFIDENTIAL 12
ProShield Initialization (10/21)
There will be three fingerprint capture boxes; the finger you choose to register will be marked with a blue dot.
ACER CONFIDENTIAL 13
ProShield Initialization (11/21)
Swipe your finger across the sensor, slowly and precisely. The system will capture all your fingerprint data and once registration is successful, it will state "Succeeded".
Repeat the above process to register another finger.
ACER CONFIDENTIAL 14
ProShield Initialization (12/21)
If the image cannot be captured, you will be notified with messages such as “bad image” or “too fast” and the fingerprint will appear in red.
If the registration process failed, you will be notified with a red cross and asked to try again.
ACER CONFIDENTIAL 15
ProShield Initialization (13/21)
Only authorized users will be able to boot the computer using registered PBA finger(s)
ACER CONFIDENTIAL 16
ProShield Initialization (14/21)
Set BIOS supervisor & user password for Pre-Boot Authentication.
ACER CONFIDENTIAL 17
ProShield Initialization (15/21)
Select up to two registered fingers to use for PBA by clicking on the checkboxes above the fingers
Check the box Enable automatic Windows logon after completing PBA if you require this function
ACER CONFIDENTIAL 18
ProShield Initialization (16/21)
Click Face Login Settings to initialize face login registration
Or Next to skip face login settings
*Available in Acer commercial notebooks only.
ACER CONFIDENTIAL 19
ProShield Initialization (17/21)
Click Capture to get a face picture for recognition.
*Available in selected Acer commercial notebooks only.
ACER CONFIDENTIAL 20
ProShield Initialization (18/21)
Check Log in to Windows with my face to enable Face Login function
Adjust Accuracy setting if necessary
*Available in selected Acer commercial notebooks only.
ACER CONFIDENTIAL 21
ProShield Initialization (19/21)
A personal secure disk for you to store your private data in a virtual disk
ACER CONFIDENTIAL 22
ProShield Initialization (20/21)
Message window is pop up to hint the user PSD is creating.
ACER CONFIDENTIAL 23
ProShield Initialization (21/21)
Personal Secure Drive initialization is done.
ACER CONFIDENTIAL
ProShield Initialization
BIOS Settings
Credential Manager
Pre-Boot Authentication
Data Protection
Data Removal
ACER CONFIDENTIAL 25
BIOS Settings – BIOS Security
Create/Change/Remove the BIOS supervisor/user password
– *A-Z a-z 0-9 * + , - . / \ ; = [ ] ` ‘ are allowed
ACER CONFIDENTIAL 26
BIOS Settings – BIOS Security
Enable the BIOS password protection as soon as the computer is switched on
ACER CONFIDENTIAL 27
BIOS Settings – Boot Order Setting
Set the boot order for the operating system
– Click the arrow up/down to line up the device boot order.
ACER CONFIDENTIAL 28
BIOS Settings – Boot Order Setting
Set the boot order for the operating system
1. Click the arrow up/down to line up the device boot order.
2. You need to provide the BIOS supervisor password to make any changes to the boot order.
ACER CONFIDENTIAL 29
BIOS Settings – Port and Device Control
Enable/Disable any external ports or devices from BIOS
– Click the radio button to enable/disable the port or device accordingly.
ACER CONFIDENTIAL 30
BIOS Settings – Import BIOS Settings
Recover the BIOS settings from the import function
1. Determine the file to be imported by clicking the Browser… button
2. Provide the backup password
3. Click OK button to restore the BIOS settings.
ACER CONFIDENTIAL 31
BIOS Settings – Export BIOS Settings
Backup all BIOS settings from the export function
1. Select a location to save the exported file by clicking the Browse… button.
2. Setup a backup password to protect the file and provide the cue to recall the password in the hint button.
ACER CONFIDENTIAL
ProShield Initialization
BIOS Settings
Credential Manager
Pre-Boot Authentication
Data Protection
Data Removal
ACER CONFIDENTIAL 33
Credential Manager – Password Settings
Change the ProShield password
1. Click Password Settings and switch to ProShield Password.
2. Enter the old and new ProShield password accordingly.
3. Click OK or Apply to save changes.
ACER CONFIDENTIAL 34
Credential Manager – Password Settings
Change the Windows password
1. Click Password Settings and switch to Windows Password.
2. Enter the old and new Windows account password accordingly.
3. Click OK or Apply to save changes.
ACER CONFIDENTIAL 35
Credential Manager – Fingerprint Registration
Select the finger you wish to register by clicking the box on top of it
ACER CONFIDENTIAL 36
Credential Manager – Fingerprint Registration
There will be three fingerprint capture boxes; the finger you choose to register will be marked with a blue dot.
ACER CONFIDENTIAL 37
Credential Manager – Fingerprint Registration
Swipe your finger across the sensor, slowly and precisely. The system will capture all your fingerprint data and once registration is successful, it will state "Succeeded".
Repeat the above process to register another finger.
ACER CONFIDENTIAL 38
Credential Manager – Fingerprint Registration
If the image cannot be captured, you will be notified with messages such as “bad image” or “too fast” and the fingerprint will appear in red.
If the registration process failed, you will be notified with a red cross and asked to try again.
ACER CONFIDENTIAL 39
Credential Manager – Fingerprint Registration
Deleting a registered Fingerprint
1. Select the finger you wish to delete by clicking the fingerprint associated with that finger.
2. A pop-up box will appear to ask if you want to delete the registered fingerprint selected. Click Yes to delete the fingerprint.
3. Repeat the above process if you wish to continue deleting other registered fingers.
ACER CONFIDENTIAL 40
Credential Manager – Face Login* Settings
Click Capture to get a face picture for recognition.
*Available in selected Acer commercial notebooks only.
ACER CONFIDENTIAL 41
Credential Manager – Face Login* Settings
Capture more face pictures for recognition if necessary
Check Log in to Windows with my face to enable Face Login function
Adjust Accuracy setting if necessary
Check face pictures from Show all faces
*Available in selected Acer commercial notebooks only.
ACER CONFIDENTIAL 42
Credential Manager – Face Login* Settings
Remove selected or all face pictures
*Available in selected Acer commercial notebooks only.
ACER CONFIDENTIAL 43
Credential Manager – TPM Information
Information on the security hardware and software installed
– Chip enabled state
– Chip Owner initialization state
– Chip Information - Manufacturer, TPM Version, TSS Vendor, and TSS Version information
ACER CONFIDENTIAL 44
Credential Manager – TPM Admin Settings
If TPM chip is not enabled
– Enable the TPM security chip, from Windows, without entering the BIOS
ACER CONFIDENTIAL 45
Credential Manager – TPM Admin Settings
If TPM ownership is not established
– Establish the TPM ownership by clicking “Establish” button
ACER CONFIDENTIAL 46
Credential Manager – TPM Admin Settings
To change the TPM owner password, the TPM owner may simply select Change and be guided through the process.
The TPM Security Chip guards against attack by entering into a locked state after a number of incorrect password attempts have been executed
ACER CONFIDENTIAL 47
Credential Manager – EFS with TPM
Create a TPM certificate for Microsoft Encrypting File System (EFS)
ACER CONFIDENTIAL 48
Credential Manager – EFS with TPM
Microsoft EFS encryption using the TPM
– Create a TPM certificate for EFS
– Choose a previously created TPM certificate for encryption
– Reset EFS to use a software certificate
ACER CONFIDENTIAL 49
Credential Manager – EFS with TPM
Users also can set encrypt and decrypt options for the Windows Explorer context menu available
ACER CONFIDENTIAL 50
Credential Manager – TPM Archive/Restore
Ensure that the keys are backed up to enable recovery from hardware failure or move the protected data to a new PC
ACER CONFIDENTIAL 51
Credential Manager – TPM Archive/Restore
• Create an archive of keys generated by the TPM
1. Specify an archive location
2. Set an archive password to access the archive
ACER CONFIDENTIAL 52
Credential Manager – TPM Archive/Restore
Ensure that the keys are backed up to enable recovery from hardware failure or move the protected data to a new PC
ACER CONFIDENTIAL 53
Credential Manager – TPM Archive/Restore
Restore keys that have previously been archived
1. Point to the archive file
2. Enter the archive password to restore the TPM keys.
ACER CONFIDENTIAL 54
Credential Manager – Online Account Information
To store user IDs and passwords of accounts online, so that the next time you want to log on, the software will auto fill-in your user ID and password for you.
ACER CONFIDENTIAL 55
Credential Manager – Online Account Information
Registering Online Accounts Item
1. Open a website/application which requires a username and password input.
2. A ProShield account online setting icon will appear on the top left hand corner of the webpage to prompt you to add the item in your Online Accounts list.
ACER CONFIDENTIAL 56
Credential Manager – Online Account Information
Registering Online Accounts Item
3. Click the icon , then you will be prompted to enter your username and password for this item. If a field required for logon is not displayed in the Account Information area, click Choose Fields to select the additional fields. Username
Password
Log In
ACER CONFIDENTIAL 57
Credential Manager – Online Account Information
Registering Online Accounts Item
4. The system will automatically save this account and logon information in your Online Accounts list to auto-fill these fields in your next visit
ACER CONFIDENTIAL 58
Credential Manager – Backup
Back up ProShield password, registered fingerprints, Online Accounts and TPM key
1. Determine the location of the backed up data.
2. Create a backup password, confirm it and type in a password hint.
ACER CONFIDENTIAL 59
Credential Manager – Restore
Restore the ProShield password, registered fingerprints, Online Accounts and TPM/TCM key that you previously backed up
1. Input the file name and back up password.
2. Click on the password hint if you cannot remember your back up password.
ACER CONFIDENTIAL
ProShield Initialization
BIOS Settings
Credential Manager
Pre-Boot Authentication
Data Protection
Data Removal
ACER CONFIDENTIAL 61
Pre-Boot Authentication – Fingerprint Management
Only authorized users will be able to boot the computer using registered PBA finger(s)
ACER CONFIDENTIAL 62
Pre-Boot Authentication – Fingerprint Management
Select up to two registered fingers to use for PBA by clicking on the checkboxes above the fingers
Check the box “Enable automatic Windows logon after completing PBA” if you require this function
ACER CONFIDENTIAL
ProShield Initialization
BIOS Settings
Credential Manager
Pre-Boot Authentication
Data Protection
Data Removal
ACER CONFIDENTIAL 64
Data Protection – File Encryption
Encrypt a file in the following ways
– Select the Encrypt File option in the right-button context menu under the ProShield menu item
– Click Console> Data Protection> File Encryption and you can “add” or “drag and drop” files onto the list
ACER CONFIDENTIAL 65
Data Protection – File Decryption
• Decrypt a file in the following ways – Select the Decrypt File option in the
right-button context menu under the ProShield menu item
– Click Console> Data Protection> File Decryption and you can “add” or “drag and drop” files onto the list
ACER CONFIDENTIAL 66
Data Protection – Personal Secure Drive
A personal secure disk for you to store your private data in a virtual disk
ACER CONFIDENTIAL 67
Data Protection – Personal Secure Drive
System allows to change the default configuration for the PSD and set the size/capacity and location
– Status – Choose to open/close from this window
– Location – Choose from the drop-down menu to select/change the Personal Secure Drive location
– Capacity – Type in your desired capacity or drag and move the indicator to change the capacity
ACER CONFIDENTIAL 68
Data Protection – Device Lock
Device Lock controls access to devices and interfaces to ensure that data remains safe when the computer is unattended
– Decide locked/unlocked status of the each device/interface listed on the main screen
– After modifying settings, click the “Apply” button to enable changes.
ACER CONFIDENTIAL 69
Data Protection – Device Lock
Authorize a removable storage device so that it can be accessed even when “Removable Data Devices” are locked
ACER CONFIDENTIAL 70
Data Protection – Device Lock
To authorize a device:
1. Make sure “Removable Data Devices” are unlocked.
ACER CONFIDENTIAL 71
Data Protection – Device Lock
To authorize a device:
1. Make sure “Removable Data Devices” are unlocked.
2. Select your unauthorized device in the “Detected removable storage” list. This will enable the “Authorize” button.
3. Click the “Authorize” button.
ACER CONFIDENTIAL 72
Data Protection – Device Lock
To de-authorize a device:
1. Make sure “Removable Data Devices” are unlocked.
ACER CONFIDENTIAL 73
Data Protection – Device Lock
To de-authorize a device:
1. Make sure “Removable Data Devices” are unlocked.
2. Select your authorized device in the “Detected removable storage” list. This will enable the “Disable” button.
3. Click the “Disable” button.
ACER CONFIDENTIAL 74
Data Protection – Device Lock
Lock/Unlock all hotkey
– Any combination of “Ctrl” plus “Alt” plus one key is allowed
Auto Lock settings
– Automatically lock all devices after the system has been idle for a certain period of time
ACER CONFIDENTIAL
ProShield Initialization
BIOS Settings
Credential Manager
Pre-Boot Authentication
Data Protection
Data Removal
ACER CONFIDENTIAL 76
Data Removal – File Shredder
Shred files and folders permanently by either of following ways
– Select the Shred File option in the right-button context menu under the ProShield menu
– Drag and drop files/folders into the window or browse files to add to the list of items to shred
Thank you