Acer Commercial Solution ProShield Training · PDF file– Click “Next” to set...

ACER CONFIDENTIAL

Acer ProShield

Solution Training v1.1

ACER CONFIDENTIAL

• ProShield Initialization

• BIOS Settings

• Credential Manager

• Pre-Boot Authentication

• Data Protection

• Data Removal

Agenda

ACER CONFIDENTIAL

ProShield Initialization

BIOS Settings

Credential Manager

Pre-Boot Authentication

Data Protection

Data Removal

ACER CONFIDENTIAL 3

ProShield Initialization (1/21)

It requires users to perform the initialization while executing ProShield at the first time.

ACER CONFIDENTIAL 4

ProShield Initialization (2/21)

ProShield Setup Wizard.

ACER CONFIDENTIAL 5

ProShield Initialization (3/21)

TPM security chip is disabled while initialization

– If click "Yes", enable TPM and reboot automatically.

– If click "No", continue to do initial wizard without TPM protection

ACER CONFIDENTIAL 6

ProShield Initialization (4/21)

Reboot the computer is required after succeeded to enable TPM.

– After reboot, ProShield initial wizard will launch automatically from start page.

ACER CONFIDENTIAL 7

ProShield Initialization (5/21)

Set ProShield password

1. Enter the ProShield password

2. Confirm the password

3. Enter password hint

4. Click Next to save changes.

ACER CONFIDENTIAL 8

ProShield Initialization (6/21)

ProShield initialization is finished for TPM and ProShield password.

– Click “Next” to set Fingerprint Registration, Pre-Boot Authentication and Personal Secure Drive

– Click “Finish” to leave initialization wizard

ACER CONFIDENTIAL 9

ProShield Initialization (7/21)

Introduction page of fingerprint enrollment

ACER CONFIDENTIAL 10

ProShield Initialization (8/21)

Request to confirm the Windows account password for fingerprint registration

ACER CONFIDENTIAL 11

ProShield Initialization (9/21)

Select the finger you wish to register by clicking the box on top of it

ACER CONFIDENTIAL 12

ProShield Initialization (10/21)

There will be three fingerprint capture boxes; the finger you choose to register will be marked with a blue dot.

ACER CONFIDENTIAL 13

ProShield Initialization (11/21)

Swipe your finger across the sensor, slowly and precisely. The system will capture all your fingerprint data and once registration is successful, it will state "Succeeded".

Repeat the above process to register another finger.

ACER CONFIDENTIAL 14

ProShield Initialization (12/21)

If the image cannot be captured, you will be notified with messages such as “bad image” or “too fast” and the fingerprint will appear in red.

If the registration process failed, you will be notified with a red cross and asked to try again.

ACER CONFIDENTIAL 15

ProShield Initialization (13/21)

Only authorized users will be able to boot the computer using registered PBA finger(s)

ACER CONFIDENTIAL 16

ProShield Initialization (14/21)

Set BIOS supervisor & user password for Pre-Boot Authentication.

ACER CONFIDENTIAL 17

ProShield Initialization (15/21)

Select up to two registered fingers to use for PBA by clicking on the checkboxes above the fingers

Check the box Enable automatic Windows logon after completing PBA if you require this function

ACER CONFIDENTIAL 18

ProShield Initialization (16/21)

Click Face Login Settings to initialize face login registration

Or Next to skip face login settings

*Available in Acer commercial notebooks only.

ACER CONFIDENTIAL 19

ProShield Initialization (17/21)

Click Capture to get a face picture for recognition.

*Available in selected Acer commercial notebooks only.

ACER CONFIDENTIAL 20

ProShield Initialization (18/21)

Check Log in to Windows with my face to enable Face Login function

Adjust Accuracy setting if necessary

*Available in selected Acer commercial notebooks only.

ACER CONFIDENTIAL 21

ProShield Initialization (19/21)

A personal secure disk for you to store your private data in a virtual disk

ACER CONFIDENTIAL 22

ProShield Initialization (20/21)

Message window is pop up to hint the user PSD is creating.

ACER CONFIDENTIAL 23

ProShield Initialization (21/21)

Personal Secure Drive initialization is done.

ACER CONFIDENTIAL

ProShield Initialization

BIOS Settings

Credential Manager

Pre-Boot Authentication

Data Protection

Data Removal

ACER CONFIDENTIAL 25

BIOS Settings – BIOS Security

Create/Change/Remove the BIOS supervisor/user password

– *A-Z a-z 0-9 * + , - . / \ ; = [ ] ` ‘ are allowed

ACER CONFIDENTIAL 26

BIOS Settings – BIOS Security

Enable the BIOS password protection as soon as the computer is switched on

ACER CONFIDENTIAL 27

BIOS Settings – Boot Order Setting

Set the boot order for the operating system

– Click the arrow up/down to line up the device boot order.

ACER CONFIDENTIAL 28

BIOS Settings – Boot Order Setting

Set the boot order for the operating system

1. Click the arrow up/down to line up the device boot order.

2. You need to provide the BIOS supervisor password to make any changes to the boot order.

ACER CONFIDENTIAL 29

BIOS Settings – Port and Device Control

Enable/Disable any external ports or devices from BIOS

– Click the radio button to enable/disable the port or device accordingly.

ACER CONFIDENTIAL 30

BIOS Settings – Import BIOS Settings

Recover the BIOS settings from the import function

1. Determine the file to be imported by clicking the Browser… button

2. Provide the backup password

3. Click OK button to restore the BIOS settings.

ACER CONFIDENTIAL 31

BIOS Settings – Export BIOS Settings

Backup all BIOS settings from the export function

1. Select a location to save the exported file by clicking the Browse… button.

2. Setup a backup password to protect the file and provide the cue to recall the password in the hint button.

ACER CONFIDENTIAL

ProShield Initialization

BIOS Settings

Credential Manager

Pre-Boot Authentication

Data Protection

Data Removal

ACER CONFIDENTIAL 33

Credential Manager – Password Settings

Change the ProShield password

1. Click Password Settings and switch to ProShield Password.

2. Enter the old and new ProShield password accordingly.

3. Click OK or Apply to save changes.

ACER CONFIDENTIAL 34

Credential Manager – Password Settings

Change the Windows password

1. Click Password Settings and switch to Windows Password.

2. Enter the old and new Windows account password accordingly.

3. Click OK or Apply to save changes.

ACER CONFIDENTIAL 35

Credential Manager – Fingerprint Registration

Select the finger you wish to register by clicking the box on top of it

ACER CONFIDENTIAL 36

Credential Manager – Fingerprint Registration

There will be three fingerprint capture boxes; the finger you choose to register will be marked with a blue dot.

ACER CONFIDENTIAL 37

Credential Manager – Fingerprint Registration

Swipe your finger across the sensor, slowly and precisely. The system will capture all your fingerprint data and once registration is successful, it will state "Succeeded".

Repeat the above process to register another finger.

ACER CONFIDENTIAL 38

Credential Manager – Fingerprint Registration

If the image cannot be captured, you will be notified with messages such as “bad image” or “too fast” and the fingerprint will appear in red.

If the registration process failed, you will be notified with a red cross and asked to try again.

ACER CONFIDENTIAL 39

Credential Manager – Fingerprint Registration

Deleting a registered Fingerprint

1. Select the finger you wish to delete by clicking the fingerprint associated with that finger.

2. A pop-up box will appear to ask if you want to delete the registered fingerprint selected. Click Yes to delete the fingerprint.

3. Repeat the above process if you wish to continue deleting other registered fingers.

ACER CONFIDENTIAL 40

Credential Manager – Face Login* Settings

Click Capture to get a face picture for recognition.

*Available in selected Acer commercial notebooks only.

ACER CONFIDENTIAL 41

Credential Manager – Face Login* Settings

Capture more face pictures for recognition if necessary

Check Log in to Windows with my face to enable Face Login function

Adjust Accuracy setting if necessary

Check face pictures from Show all faces

*Available in selected Acer commercial notebooks only.

ACER CONFIDENTIAL 42

Credential Manager – Face Login* Settings

Remove selected or all face pictures

*Available in selected Acer commercial notebooks only.

ACER CONFIDENTIAL 43

Credential Manager – TPM Information

Information on the security hardware and software installed

– Chip enabled state

– Chip Owner initialization state

– Chip Information - Manufacturer, TPM Version, TSS Vendor, and TSS Version information

ACER CONFIDENTIAL 44

Credential Manager – TPM Admin Settings

If TPM chip is not enabled

– Enable the TPM security chip, from Windows, without entering the BIOS

ACER CONFIDENTIAL 45

Credential Manager – TPM Admin Settings

If TPM ownership is not established

– Establish the TPM ownership by clicking “Establish” button

ACER CONFIDENTIAL 46

Credential Manager – TPM Admin Settings

To change the TPM owner password, the TPM owner may simply select Change and be guided through the process.

The TPM Security Chip guards against attack by entering into a locked state after a number of incorrect password attempts have been executed

ACER CONFIDENTIAL 47

Credential Manager – EFS with TPM

Create a TPM certificate for Microsoft Encrypting File System (EFS)

ACER CONFIDENTIAL 48

Credential Manager – EFS with TPM

Microsoft EFS encryption using the TPM

– Create a TPM certificate for EFS

– Choose a previously created TPM certificate for encryption

– Reset EFS to use a software certificate

ACER CONFIDENTIAL 49

Credential Manager – EFS with TPM

Users also can set encrypt and decrypt options for the Windows Explorer context menu available

ACER CONFIDENTIAL 50

Credential Manager – TPM Archive/Restore

Ensure that the keys are backed up to enable recovery from hardware failure or move the protected data to a new PC

ACER CONFIDENTIAL 51

Credential Manager – TPM Archive/Restore

• Create an archive of keys generated by the TPM

1. Specify an archive location

2. Set an archive password to access the archive

ACER CONFIDENTIAL 52

Credential Manager – TPM Archive/Restore

Ensure that the keys are backed up to enable recovery from hardware failure or move the protected data to a new PC

ACER CONFIDENTIAL 53

Credential Manager – TPM Archive/Restore

Restore keys that have previously been archived

1. Point to the archive file

2. Enter the archive password to restore the TPM keys.

ACER CONFIDENTIAL 54

Credential Manager – Online Account Information

To store user IDs and passwords of accounts online, so that the next time you want to log on, the software will auto fill-in your user ID and password for you.

ACER CONFIDENTIAL 55

Credential Manager – Online Account Information

Registering Online Accounts Item

1. Open a website/application which requires a username and password input.

2. A ProShield account online setting icon will appear on the top left hand corner of the webpage to prompt you to add the item in your Online Accounts list.

ACER CONFIDENTIAL 56

Credential Manager – Online Account Information

Registering Online Accounts Item

3. Click the icon , then you will be prompted to enter your username and password for this item. If a field required for logon is not displayed in the Account Information area, click Choose Fields to select the additional fields. Username

Password

Log In

ACER CONFIDENTIAL 57

Credential Manager – Online Account Information

Registering Online Accounts Item

4. The system will automatically save this account and logon information in your Online Accounts list to auto-fill these fields in your next visit

ACER CONFIDENTIAL 58

Credential Manager – Backup

Back up ProShield password, registered fingerprints, Online Accounts and TPM key

1. Determine the location of the backed up data.

2. Create a backup password, confirm it and type in a password hint.

ACER CONFIDENTIAL 59

Credential Manager – Restore

Restore the ProShield password, registered fingerprints, Online Accounts and TPM/TCM key that you previously backed up

1. Input the file name and back up password.

2. Click on the password hint if you cannot remember your back up password.

ACER CONFIDENTIAL

ProShield Initialization

BIOS Settings

Credential Manager

Pre-Boot Authentication

Data Protection

Data Removal

ACER CONFIDENTIAL 61

Pre-Boot Authentication – Fingerprint Management

Only authorized users will be able to boot the computer using registered PBA finger(s)

ACER CONFIDENTIAL 62

Pre-Boot Authentication – Fingerprint Management

Select up to two registered fingers to use for PBA by clicking on the checkboxes above the fingers

Check the box “Enable automatic Windows logon after completing PBA” if you require this function

ACER CONFIDENTIAL

ProShield Initialization

BIOS Settings

Credential Manager

Pre-Boot Authentication

Data Protection

Data Removal

ACER CONFIDENTIAL 64

Data Protection – File Encryption

Encrypt a file in the following ways

– Select the Encrypt File option in the right-button context menu under the ProShield menu item

– Click Console> Data Protection> File Encryption and you can “add” or “drag and drop” files onto the list

ACER CONFIDENTIAL 65

Data Protection – File Decryption

• Decrypt a file in the following ways – Select the Decrypt File option in the

right-button context menu under the ProShield menu item

– Click Console> Data Protection> File Decryption and you can “add” or “drag and drop” files onto the list

ACER CONFIDENTIAL 66

Data Protection – Personal Secure Drive

A personal secure disk for you to store your private data in a virtual disk

ACER CONFIDENTIAL 67

Data Protection – Personal Secure Drive

System allows to change the default configuration for the PSD and set the size/capacity and location

– Status – Choose to open/close from this window

– Location – Choose from the drop-down menu to select/change the Personal Secure Drive location

– Capacity – Type in your desired capacity or drag and move the indicator to change the capacity

ACER CONFIDENTIAL 68

Data Protection – Device Lock

Device Lock controls access to devices and interfaces to ensure that data remains safe when the computer is unattended

– Decide locked/unlocked status of the each device/interface listed on the main screen

– After modifying settings, click the “Apply” button to enable changes.

ACER CONFIDENTIAL 69

Data Protection – Device Lock

Authorize a removable storage device so that it can be accessed even when “Removable Data Devices” are locked

ACER CONFIDENTIAL 70

Data Protection – Device Lock

To authorize a device:

1. Make sure “Removable Data Devices” are unlocked.

ACER CONFIDENTIAL 71

Data Protection – Device Lock

To authorize a device:

1. Make sure “Removable Data Devices” are unlocked.

2. Select your unauthorized device in the “Detected removable storage” list. This will enable the “Authorize” button.

3. Click the “Authorize” button.

ACER CONFIDENTIAL 72

Data Protection – Device Lock

To de-authorize a device:

1. Make sure “Removable Data Devices” are unlocked.

ACER CONFIDENTIAL 73

Data Protection – Device Lock

To de-authorize a device:

1. Make sure “Removable Data Devices” are unlocked.

2. Select your authorized device in the “Detected removable storage” list. This will enable the “Disable” button.

3. Click the “Disable” button.

ACER CONFIDENTIAL 74

Data Protection – Device Lock

Lock/Unlock all hotkey

– Any combination of “Ctrl” plus “Alt” plus one key is allowed

Auto Lock settings

– Automatically lock all devices after the system has been idle for a certain period of time

ACER CONFIDENTIAL

ProShield Initialization

BIOS Settings

Credential Manager

Pre-Boot Authentication

Data Protection

Data Removal

ACER CONFIDENTIAL 76

Data Removal – File Shredder

Shred files and folders permanently by either of following ways

– Select the Shred File option in the right-button context menu under the ProShield menu

– Drag and drop files/folders into the window or browse files to add to the list of items to shred

Thank you