16 www.hp.com HP ProtectTools Embedded Security Guide
HP ProtectTools Embedded Security
■ Encrypt sensitive data on computers that are members of a
domain. This protects against compromise of data through offline
cryptographic attacks.
■ Regularly back up the entire server that stores server-based
encrypted data. This ensures that in the event of data recovery,
the profiles that include decryption keys can also be restored.
■ If you are encrypting file types that are monitored by System
Restore, put the files on a volume that is not monitored by System
Restore.
■ The system does not support multiple levels of encryption. For
example, a user should not store an EFS encrypted file in the
PSD, nor try to encrypt a file already stored in the PSD.