Acer Commercial Solution ProShield Trainingstatic.acer.com/up/Resource/Acer/Professional... · 4/10/2013 · Credential Manager – Password Settings Change the Windows password

ACER CONFIDENTIAL

Acer ProShield

Solution Training v1.1

ACER CONFIDENTIAL

• ProShield Initialization

• BIOS Settings

• Credential Manager

• Pre-Boot Authentication

• Data Protection

• Data Removal

Agenda

ACER CONFIDENTIAL

ProShield Initialization

BIOS Settings

Credential Manager

Pre-Boot Authentication

Data Protection

Data Removal

ACER CONFIDENTIAL 3

ProShield Initialization (1/21)

It requires users to perform the initialization while executing ProShield at the first time.

ACER CONFIDENTIAL 4


ProShield Setup Wizard.

ACER CONFIDENTIAL 5


TPM security chip is disabled while initialization

– If click "Yes", enable TPM and reboot automatically.

– If click "No", continue to do initial wizard without TPM protection

ACER CONFIDENTIAL 6


Reboot the computer is required after succeeded to enable TPM.

– After reboot, ProShield initial wizard will launch automatically from start page.

ACER CONFIDENTIAL 7


Set ProShield password

1. Enter the ProShield password

2. Confirm the password

3. Enter password hint

4. Click Next to save changes.

ACER CONFIDENTIAL 8


ProShield initialization is finished for TPM and ProShield password.

– Click “Next” to set Fingerprint Registration, Pre-Boot Authentication and Personal Secure Drive

– Click “Finish” to leave initialization wizard

ACER CONFIDENTIAL 9


Introduction page of fingerprint enrollment

ACER CONFIDENTIAL 10


Request to confirm the Windows account password for fingerprint registration



Select the finger you wish to register by clicking the box on top of it



There will be three fingerprint capture boxes; the finger you choose to register will be marked with a blue dot.



Swipe your finger across the sensor, slowly and precisely. The system will capture all your fingerprint data and once registration is successful, it will state "Succeeded".

Repeat the above process to register another finger.



If the image cannot be captured, you will be notified with messages such as “bad image” or “too fast” and the fingerprint will appear in red.

If the registration process failed, you will be notified with a red cross and asked to try again.



Only authorized users will be able to boot the computer using registered PBA finger(s)



Set BIOS supervisor & user password for Pre-Boot Authentication.



Select up to two registered fingers to use for PBA by clicking on the checkboxes above the fingers

Check the box Enable automatic Windows logon after completing PBA if you require this function



Click Face Login Settings to initialize face login registration

Or Next to skip face login settings

*Available in Acer commercial notebooks only.



Click Capture to get a face picture for recognition.

*Available in selected Acer commercial notebooks only.



Check Log in to Windows with my face to enable Face Login function

Adjust Accuracy setting if necessary




A personal secure disk for you to store your private data in a virtual disk



Message window is pop up to hint the user PSD is creating.



Personal Secure Drive initialization is done.

ACER CONFIDENTIAL


BIOS Settings

Credential Manager


Data Protection

Data Removal


BIOS Settings – BIOS Security

Create/Change/Remove the BIOS supervisor/user password

– *A-Z a-z 0-9 * + , - . / \ ; = [ ] ` ‘ are allowed


BIOS Settings – BIOS Security

Enable the BIOS password protection as soon as the computer is switched on


BIOS Settings – Boot Order Setting

Set the boot order for the operating system

– Click the arrow up/down to line up the device boot order.


BIOS Settings – Boot Order Setting

Set the boot order for the operating system

1. Click the arrow up/down to line up the device boot order.

2. You need to provide the BIOS supervisor password to make any changes to the boot order.


BIOS Settings – Port and Device Control

Enable/Disable any external ports or devices from BIOS

– Click the radio button to enable/disable the port or device accordingly.


BIOS Settings – Import BIOS Settings

Recover the BIOS settings from the import function

1. Determine the file to be imported by clicking the Browser… button

2. Provide the backup password

3. Click OK button to restore the BIOS settings.


BIOS Settings – Export BIOS Settings

Backup all BIOS settings from the export function

1. Select a location to save the exported file by clicking the Browse… button.

2. Setup a backup password to protect the file and provide the cue to recall the password in the hint button.

ACER CONFIDENTIAL


BIOS Settings

Credential Manager


Data Protection

Data Removal


Credential Manager – Password Settings

Change the ProShield password

1. Click Password Settings and switch to ProShield Password.

2. Enter the old and new ProShield password accordingly.

3. Click OK or Apply to save changes.


Credential Manager – Password Settings

Change the Windows password

1. Click Password Settings and switch to Windows Password.

2. Enter the old and new Windows account password accordingly.

3. Click OK or Apply to save changes.


Credential Manager – Fingerprint Registration

Select the finger you wish to register by clicking the box on top of it



There will be three fingerprint capture boxes; the finger you choose to register will be marked with a blue dot.



Swipe your finger across the sensor, slowly and precisely. The system will capture all your fingerprint data and once registration is successful, it will state "Succeeded".

Repeat the above process to register another finger.



If the image cannot be captured, you will be notified with messages such as “bad image” or “too fast” and the fingerprint will appear in red.

If the registration process failed, you will be notified with a red cross and asked to try again.



Deleting a registered Fingerprint

1. Select the finger you wish to delete by clicking the fingerprint associated with that finger.

2. A pop-up box will appear to ask if you want to delete the registered fingerprint selected. Click Yes to delete the fingerprint.

3. Repeat the above process if you wish to continue deleting other registered fingers.


Credential Manager – Face Login* Settings

Click Capture to get a face picture for recognition.




Capture more face pictures for recognition if necessary

Check Log in to Windows with my face to enable Face Login function

Adjust Accuracy setting if necessary

Check face pictures from Show all faces




Remove selected or all face pictures



Credential Manager – TPM Information

Information on the security hardware and software installed

– Chip enabled state

– Chip Owner initialization state

– Chip Information - Manufacturer, TPM Version, TSS Vendor, and TSS Version information


Credential Manager – TPM Admin Settings

If TPM chip is not enabled

– Enable the TPM security chip, from Windows, without entering the BIOS



If TPM ownership is not established

– Establish the TPM ownership by clicking “Establish” button



To change the TPM owner password, the TPM owner may simply select Change and be guided through the process.

The TPM Security Chip guards against attack by entering into a locked state after a number of incorrect password attempts have been executed


Credential Manager – EFS with TPM

Create a TPM certificate for Microsoft Encrypting File System (EFS)



Microsoft EFS encryption using the TPM

– Create a TPM certificate for EFS

– Choose a previously created TPM certificate for encryption

– Reset EFS to use a software certificate



Users also can set encrypt and decrypt options for the Windows Explorer context menu available


Credential Manager – TPM Archive/Restore

Ensure that the keys are backed up to enable recovery from hardware failure or move the protected data to a new PC



• Create an archive of keys generated by the TPM

1. Specify an archive location

2. Set an archive password to access the archive



Ensure that the keys are backed up to enable recovery from hardware failure or move the protected data to a new PC



Restore keys that have previously been archived

1. Point to the archive file

2. Enter the archive password to restore the TPM keys.


Credential Manager – Online Account Information

To store user IDs and passwords of accounts online, so that the next time you want to log on, the software will auto fill-in your user ID and password for you.



Registering Online Accounts Item

1. Open a website/application which requires a username and password input.

2. A ProShield account online setting icon will appear on the top left hand corner of the webpage to prompt you to add the item in your Online Accounts list.




3. Click the icon , then you will be prompted to enter your username and password for this item. If a field required for logon is not displayed in the Account Information area, click Choose Fields to select the additional fields. Username

Password

Log In




4. The system will automatically save this account and logon information in your Online Accounts list to auto-fill these fields in your next visit


Credential Manager – Backup

Back up ProShield password, registered fingerprints, Online Accounts and TPM key

1. Determine the location of the backed up data.

2. Create a backup password, confirm it and type in a password hint.


Credential Manager – Restore

Restore the ProShield password, registered fingerprints, Online Accounts and TPM/TCM key that you previously backed up

1. Input the file name and back up password.

2. Click on the password hint if you cannot remember your back up password.

ACER CONFIDENTIAL


BIOS Settings

Credential Manager


Data Protection

Data Removal


Pre-Boot Authentication – Fingerprint Management

Only authorized users will be able to boot the computer using registered PBA finger(s)


Pre-Boot Authentication – Fingerprint Management

Select up to two registered fingers to use for PBA by clicking on the checkboxes above the fingers

Check the box “Enable automatic Windows logon after completing PBA” if you require this function

ACER CONFIDENTIAL


BIOS Settings

Credential Manager


Data Protection

Data Removal


Data Protection – File Encryption

Encrypt a file in the following ways

– Select the Encrypt File option in the right-button context menu under the ProShield menu item

– Click Console> Data Protection> File Encryption and you can “add” or “drag and drop” files onto the list


Data Protection – File Decryption

• Decrypt a file in the following ways – Select the Decrypt File option in the

right-button context menu under the ProShield menu item

– Click Console> Data Protection> File Decryption and you can “add” or “drag and drop” files onto the list


Data Protection – Personal Secure Drive

A personal secure disk for you to store your private data in a virtual disk


Data Protection – Personal Secure Drive

System allows to change the default configuration for the PSD and set the size/capacity and location

– Status – Choose to open/close from this window

– Location – Choose from the drop-down menu to select/change the Personal Secure Drive location

– Capacity – Type in your desired capacity or drag and move the indicator to change the capacity


Data Protection – Device Lock

Device Lock controls access to devices and interfaces to ensure that data remains safe when the computer is unattended

– Decide locked/unlocked status of the each device/interface listed on the main screen

– After modifying settings, click the “Apply” button to enable changes.



Authorize a removable storage device so that it can be accessed even when “Removable Data Devices” are locked



To authorize a device:

1. Make sure “Removable Data Devices” are unlocked.



To authorize a device:


2. Select your unauthorized device in the “Detected removable storage” list. This will enable the “Authorize” button.

3. Click the “Authorize” button.



To de-authorize a device:




To de-authorize a device:


2. Select your authorized device in the “Detected removable storage” list. This will enable the “Disable” button.

3. Click the “Disable” button.



Lock/Unlock all hotkey

– Any combination of “Ctrl” plus “Alt” plus one key is allowed

Auto Lock settings

– Automatically lock all devices after the system has been idle for a certain period of time

ACER CONFIDENTIAL


BIOS Settings

Credential Manager


Data Protection

Data Removal


Data Removal – File Shredder

Shred files and folders permanently by either of following ways

– Select the Shred File option in the right-button context menu under the ProShield menu

– Drag and drop files/folders into the window or browse files to add to the list of items to shred

Thank you

Documents

Acer Commercial Solution ProShield Trainingstatic.acer.com/up/Resource/Acer/Professional... · 4/10/2013 · Credential Manager – Password Settings Change the Windows password