3
3. Overview of Design
ThegoaloftheHPProtectToolsimplementationistousepasswordfiltersto
rejectpasswordsthatmightlockoutauseratthePrebootBIOSlevelorDrive
Encryptionlevel.TheProtectToolsSecurityManagerwillberesponsibleto
rejectauserpasswordatsetuporpasswordchangetime.Apasswordcanbe
acceptablefortheWindowspassword,butifallowedmaycausealockoutat
PrebootBIOSorDriveEncryptionlevel.Thesepasswordswillthereforebe
rejectedbytheHPProtectToolspasswordfilter.
TheBIOSPrebootandDriveEncryptioneachpreloadstablesofkeymapping
fromScanCodetoUnicodebasedonthesupportedkeyboardlayout.(seetable
Figure‐1below).WhentheuserentersthepasswordbeforeOSstarts,theBIOS
ortheDriveEncryptionsoftwarewillconvertthekeystrokestothecorrect
Unicodebasedonkeymappingtablesandthencomparethepasswordwiththe
onestored.TheProtectToolsSecurityManagerwillpassthekeyboardlayout
informationtoBIOSPrebootandDriveEncryption.
Inaddition,theBIOSPrebootandDriveEncryptionmayimplementadditional
methodstoassistpasswordentering.E.g.In2008BusinessNotebookBIOS,a
softkeyboardwillbeloadedtoenterglyphsdirectlywiththemouseinsteadof
pressingakeyonthekeyboardsifauserfailstotypetheirpasswordcorrectly.
TheDriveEncryptionsoftwareallowstheusertodynamicallyloadthe
keyboardlayouts.
4. Supported Keyboard Layouts in Preboot and Drive
Encryption
ThePrebootBIOSandDriveEncryptionsupportasubsetofWindows’keyboard
layoutsduetospaceandotherlimitations.Belowisalist(Figure1)of
supportedkeyboardsinPrebootandDriveEncryption.Insomecases,the
commonnameforaparticularkeyboardlayoutdiffersinWindowsVistafrom
theHPdesignation.Inordertoclarify,weprovidebothnames.