United States [Change]
Shopping Cart About Us Contact Us Sitemap MyUtimaco
Utimaco SafewareOverview
This content requires the flash player.

Overview - SafeGuard Easy V4.40 Help

Overview
Central Security Functions
Other Security Functions
New features in SafeGuard Easy
Changes to previous versions
System Requirements
Documentation
General Notes
License Note
Getting Started
Preparing For Installation
Installation Prerequisites
Installable Modules
User Interface Language
Local Installation
Step by step
Encryption mode
After Installation
Displaying Encryption progress
Switching off the Status screen
Defining Encryption Speed
Changing the background bitmap in the Windows logon dialog
Installing SafeGuard Easy on a PC with Multiple Operating Systems
Central Installation
Creating the configuration file
Installation with Active Directory
Prerequisites
Customizing MSI Packages with an Editor
Installation without Active Directory
Command line syntax for unattended installation
Selected Options used by Windows Installer
SafeGuard Easy's Features and Parameters
SafeGuard Easy's Features
SafeGuard Easy Setup Parameters
Update
Local update
Unattended update with migration file
System kernel check when there is an update
What happens if the system kernel is not OK?
About the repair program
Parameters for the repair program
Uninstallation
Local uninstallation
Uninstall with Challenge/Response
Unattended uninstall with configuration file
System Boot and Logon
Logging On as a Regular User
Logging On as a Default User
Extended logon via function key [F2].
Logging On using a Token
Changing the SafeGuard Easy Password via the [F10] key
Help Function for Resetting Forgotten Passwords via the [F9] key
Failed Logon
Pressing [F2] to Force Logon with PBA
Logging on Automatically to the Operating System
Compatibility with logon components supplied by other vendors
Administration Overview
Separation of Functions
Starting the Administration Function and the Configuration File Wizard
The Administration Function
Administration window
Toolbar
Configuration File Wizard
Reuse of configuration files from older versions of SafeGuard Easy
Creating a new configuration file
Creating a configuration file for installation
Creating a configuration file for removing SafeGuard Easy
Creating a configuration file for a change installation ("delta file")
Run the Delta-File
Changing a configuration file
Command line syntax for creation of a Configuration file
Examples of use
Changing frequently-used Registry settings with SafeGuard Easy's administrative template
Pre-Boot Authentication (PBA)
Changing the language used in pre-boot authentication at a later point in time
Switching on Password at System Start (PBA)
Machine Identification
Machine Identification
Legal Notice
Master Boot Record
MBR Protection
MBR Default Actions
Support Compaq Setup partition
Encryption
Configuring Encryption
Supported Disk Drives
Encrypting disk drives
Keys
Key management
Creating keys
Key length
Trivial keys
Random keys
Defining keys
Changing a key
Algorithms
Selecting an algorithm
SafeGuard Easy algorithms
Changing an algorithm
Displaying Encryption Status in Windows Explorer
Creating an Image of an encrypted Hard Disk Drive
Creating User Profiles
Defining Admin Tasks
Pre-defined Users
The SYSTEM user
The USER user
The *AUTOUSER
Creating Users
Copying a User
Deleting Users
User Features
Minimum user name length
Token logon
Default user (password only)
Issue abbreviated C/R Code
User Account Template
Expiration Date
User Rights
Assigning user rights
Transferring user rights
Password Settings
Pre-defined Password Rules
Permitted keys for the SafeGuard Easy password
Configuring SafeGuard Easy for Use in International Environments
The effects of different keyboard layouts
Generating internationally-uniform data for SafeGuard Easy
General Password Rules
Password at system start
Hidden password entry
Minimum Password Length
Minimum Password Age
Password history
Syntax Rules (Characters, Digits, Symbols, Opposite Case)
Forbidden Passwords
Defining forbidden passwords
Importing a password list
User-specific Password Rules
Allow Password Change
Change Password after "n" Days
Change Password on Next Logon
Defining a Password
Twinboot/Boot Manager
Functionality
Prerequisites
Example
Configuring Twinboot
Configuring Boot Manager
General settings
Boot Drives
Exchanging Data between Boot Partitions (Share plain partitions)
Token Support
Benefits of Logging On using a Token
Supported tokens
Token functions
Install token support
Logging on for the first time with a token in the pre-boot authentication
How to change the token password
How to change or delete SafeGuard Easy access data
Issuing a token
Token Issuing mode
Unattended issuing
Token Support for SafeGuard Easy's Administration Tools
Enabling logging on to the Administration tools with a token
Registering the token's PKCS#11 module
Universal Token Interface
Logging on to the Operating System with Token
Issuing a Token with Operating System data
Saving Windows data in the SAL file
Issuing a Token with the Token Administration
Installing the Token Administration
Removing SafeGuard Easy data from the token
Importing the SafeGuard Easy data from a configuration file
Quickly changing the SafeGuard Easy user
Prerequisites
Example
Remote Help
Prerequisites for Challenge/Response
Challenge/Response examples
Administering token remotely with the Token Administration
Lenovo Fingerprint Sensor
Requirements
Supported hardware
Installing Lenovo fingerprint support
Changing the SafeGuard Easy password
Frequently-asked questions
Configuring Windows logon
Secure automatic Logon (SAL)
Installing Secure Automatic Logon (SAL)
Secure Automatic Logon with Smartcard (Smartcard SAL)
Switching Secure Auto Logon Off Temporarily
Hiding the SAL dialog
Removing Data for SAL/SCSAL
Restriction
Logging onto Windows and SafeGuard Easy using the same password (password synchronization)
Benefits of password synchronization
Preparing for password synchronization
Switching on password synchronization
Carrying out password synchronization
Changing the Windows password when password synchronization is active
Changing the SafeGuard Easy password
Cancelling the password synchronization dialog
Restrictions
What should I do, if ...
Additional Windows-Logon options
Tailoring the Windows Logon Screen
Workstation Lock
Screensaver
GINA Repair
Novell Logon
SafeGuard Easy's Workstation Lock
Prerequisites
Activating the Windows Screen Saver with Password Protection
Switching off the SafeGuard Easy workstation lock
Secure Wake-On-LAN
Overview
Locking the Windows Logon
Adjusting WOL dialog
Temporary Removal of Wake-On-LAN Locks
Configuring Wake-On-LAN
Hibernation
Overview
Hibernation and SafeGuard Easy
Prerequisites and Restrictions
Setting up Hibernation
Toggling Floppy Disk and Device Encryption
Necessary User Rights
Switching Encryption
Assigning Keys with SgeCrypt
Using the Command Line to Switch Encryption Settings
Notes
FIPS 140-2 (Level 1) certification
New functions
Installing SafeGuard Easy to be FIPS-compliant
Secure use of SafeGuard Easy in certified configuration
SafeGuard Easy and Lenovo ThinkVantage Technologies - Embedded Security Subsystem (Lenovo ESS Chip)
SafeGuard Easy and TPM
Preparing the ESS/TPM Chip for Use
Required Settings for CSS Integration
Required Settings for Generating Random Keys using TPM Chip
Required Settings for Using the TPM chip to Secure the Client/Server Authentication
Required Settings for Machine Binding
Initial Machine Binding
Machine Binding Failed
Machine Binding Recovery
Recovery Mode configuration
SafeGuard Easy and Lenovo ThinkVantage Technologies - Rescue and Recovery
Overview
Rescue and Recovery with SafeGuard Easy
Advantages of combining Rescue and Recovery™ and SafeGuard Easy
Requirements
Installation
When neither Rescue and Recovery nor SafeGuard Easy are installed
SafeGuard Easy is already installed
Upgrade
Upgrading SafeGuard Easy
Upgrading Rescue and Recovery
Uninstallation
How to create a backup
Restoring File Backups
Restoring the System
Boot Environment
Restoring a SafeGuard Easy system
The IBM_SERVICE partition
Features of the IBM_SERVICE partition
What should I do, if ...
Compatibility with Absolute Computrace software
Remote Maintenance (Challenge/Response)
How it works
Installing PDA version of the Response Code Wizard
Generating a Challenge Code
Response Code
Creating a response code
Optional Extensions of the Challenge-Response Concept
Helpdesk Console
Web Self Help
VOICE.TRUST
Creating emergency media and saving the system kernel
How to create an Emergency Floppy/System Kernel Backup
Running the emergency disk wizard
Using the command line to save the system kernel
How to save SafeGuard Easy emergency files to floppy
How to create a bootable emergency disk
How to create a bootable emergency CD
How to create a bootable emergency USB memory stick
Performing an emergency boot
Restoring a system kernel
Repairing the system kernel
Emergency Uninstall of SafeGuard Easy
Notes
Accessing encrypted data when booting from an external medium
Prerequisites
Procedure
Notes
What should I do, if ...
Displaying Safe Guard Easy System Status
Reporting
Parameters
Auditing
How to use Auditing
Installing Auditing
Configuring Auditing
Configuring Event Logging
Defining destinations
Creating a new destination
Removing a destination
Copying a destination
Selecting Events
Configuring all events
Changing the view
Viewing Audited Events
Event Viewer
Log File
Notes
Central Administration
Functionality
SafeGuard Easy Server/ SafeGuard Easy Database
SafeGuard Easy Administration Console
SafeGuard Easy Clients
Supported SafeGuard Easy Client-/ SafeGuard Easy Server combinations
Exchanging Data between the Client and Server
Secure communication
Expected network load
Defining the interval for data exchange
Installation
Installing SafeGuard Easy Server/Database
Installing SafeGuard Easy's Administration Console
Installing SafeGuard Easy Clients
Maximum capacity of the SafeGuard Easy database
Restoring a SafeGuard Easy Server or database
Microsoft SQL Server Support
Important information
Generating an empty SafeGuard Easy database on the SQL Server
Registering the new (empty) SafeGuard Easy database on the SafeGuard Easy Server
Administration Console
Logging On to the Administration Console
Changing the access data for the database
Admin Console User Interface
Saving the contents of a tab as a text file
Displaying the Current Configuration of an SafeGuard Easy client
Changing an SafeGuard Easy client description
Removing an SafeGuard Easy client
Re-registering an SafeGuard Easy Client
Re-registering several SafeGuard Easy clients
Registering SafeGuard Easy Clients on another SafeGuard Easy Server
Defining Groups
Creating/Deleting Groups
Assigning an SafeGuard Easy Client to a group/Removing an SafeGuard Easy Client from a group
Finding out group membership
Changing a group name
Removing groups
Defining Rules for Displaying Workstations/Groups/Requests
Configuring a filter
Activating a filter
Requests and Queues
Creating changes (requests)
Creating a new request
Using an existing configuration file as a request
Failed requests
Changing a request name
Deleting a request
Displaying a queue
State of an SafeGuard Easy Client
State "Standard (Online)"
State "Offline"
State "Push [on]"
State "Push [off]"
Switching the SafeGuard Easy Client from Standard (Online) to Offline mode
Generating configuration updates for offline clients in the Administration Console
Loading a configuration update onto an Offline Client with SGETRANS
Automatic System Kernel Backup
Backing up the system kernel into the Backups folder
Creating a new backup folder
Exporting the system kernel
Remote Administration
Prerequisites
Installing Remote Administration
Establishing a connection to a SafeGuard Easy Client
Error Messages
PreviousNext

Overview

Personal computers often contain personal data, confidential and company information or other sensitive data.

The danger caused by the theft of notebooks should not be underestimated. Highly sensitive client information on a sales representative's notebook could fall into the hands of a competitor, resulting in serious damage for the company.

SafeGuard Easy is the ideal way to safeguard against such risks without spending too much time on implementing security measures.

How does SafeGuard Easy protect workstations against unauthorized access? The program's most important security features are its drive encryption and boot protection, which are used to prevent access to a workstation via an external data medium.

The biggest benefits of SafeGuard Easy are that the program

  • simply but effectively protects the confidentiality of stored data.
  • can be implemented quickly.
  • is very user-friendly.
  • offers a security concept suitable for many different application areas.

SafeGuard Easy is easy to install. For this reason, it is particularly well suited for stand-alone systems and mobile units such as notebooks.


PreviousNext
SafeGuard and Utimaco are trademarks of Utimaco Safeware AG. All other marks are the property of their respective owners.
Copyright © Utimaco Safeware Inc. All rights reserved. Policies | About Us | Contact Us