Chapter 1 ................. Welcome & Glossary

Chapter 2 ................. How Kilgetty protects your data

Chapter 3 ................. Kilgetty Local Managers

Chapter 4 ................. Preparing for Installation

Chapter 5 ................. Windows 2000 Installations

Chapter 6 ................. Upgrading from Kilgetty 2K v1.0

Chapter 7 ................. Setting up your BIOS

Chapter 8 ................. General Day to Day use

Chapter 9 ................. Shutting your Computer Down

Chapter 10 ................ New Features for Kilgetty 2K v1.1

Appendix A ............. Security

Appendix B ............. Technical Information

Appendix C ............. Contacts

Appendix D ............. Warranty

For installation, you should ensure that all of the following items have been supplied:

NOTE: In the case of an upgrade from Kilgetty 2K v1.0, only a Kilgetty 2K v1.1 Upgrade CD is supplied.

1. Software on CD, labelled Kilgetty 2K Version 1.1. (Installation Disk or Upgrade Disk, as appropriate)
2. Touch Memory Device holder.
3. Touch Memory Device reader.
4. Touch Memory Device.

For normal operation, the Touch Memory Device and its accessories must be available.

The Touch Memory Device is not protectively marked but must be treated as a valuable and accountable item and looked after as one would an office pass or credit card (treated as NPM ACCSEC - Please refer to IS4 Ref E)

• Become familiar with all elements of this manual and the Security Procedures (Ref. D)

• Ensure that Kilgetty is installed only on approved PCs ¹ and strictly in accordance with the instructions laid down in this manual.
  

• Retain the following:-
  • Kilgetty installation disks (CONFIDENTIAL CRYPTO for a full installation, RESTRICTED for an upgrade)
    
    
  • the boot username and password used on initial installation (when recorded, the protective marking is the same level as the data stored on the disk)
    
    
  • the serial numbers of TMDs and the PCs they are used with (these details do not take on a protective marking when recorded, but should be handled as valuable items (NPM ACCSEC))
    
    
  • the unique password entered into the BIOS (when recorded, the protective marking is one level down from stored data on the disk)
    
    
  These items must be stored as required by their protective marking, as well as securely, as different combinations of them are essential for reinstallation and data recovery in case of partial loss or compromise (see Appendix A and Appendix B). A record of the original boot details should always be maintained for recovery purposes, even if these details are subsequently changed.
  

• Retain the KLM password and username used to gain access to the KSM (Kilgetty System Manager) facilities for KSM users. These details do not take on a protective marking when recorded, but should be handled as valuable items (NPM ACCSEC).
  

• Retain records of changes to user passwords and usernames, and kept securely, as required to do so by departmental policy.

• Please read the Technical Information supplied in Appendix B to become familiar with compatibility issues.
  

• Kilgetty products encrypt the computer’s entire hard drive(s) at the time of installation. During normal operation, on-the-fly encryption / decryption occurs which requires processing time. In most cases, this processing overhead will be unnoticeable but some disk intensive operations may take slightly longer to complete.

• A typical Kilgetty installation may require 30 minutes of your time, including 15 minutes to read the relevant sections of the manual. Installation involves encrypting your computer’s entire hard drive(s), which typically (assuming a system with a Pentium 4 CPU) takes between 2 to 6 hours (~ 5-10 mins per Gb) per drive for most computers, although the exact time is computer dependent ².

• You should make sure that the computer has a permanent power supply and that you have enough time to complete the installation. You will not be required to do anything during the encryption but should be available once encryption has completed.

• The computer should be in a protected environment during installation to ensure that the power supply is not interrupted and for security reasons. However, the computer can be left unattended if appropriate physical security is guaranteed. If multiple installations are to be undertaken they can be started in sequence to save time. There is no need to fully complete an installation on one computer before starting an installation on another.

• During installation, a Boot Username, Boot Password and a BIOS Password will be required. It is extremely important to use an adequately secure password. Users should follow the guidance on choosing and handling passwords contained in IM26 (Ref C), Section III, except where instructions in this User Manual override the IM26 recommendations. Due to technical considerations, the other sections of IM26 do NOT apply to Kilgetty. You must record each of these items and store them in a secure location and give copies to your KLM. If this information is lost or forgotten then it will not be possible to access the computer.
  

• Whilst Kilgetty is a generic software product, its use is only authorised on PCs which can provide suitable protection of the BIOS parameters. During the ordering procedure, the PC on which you intended to use Kilgetty should have been approved. If you are intending to use Kilgetty on a different machine (for instance if you are upgrading your PC) then you should contact the Help Desk (see Appendix C) for further advice on approved PCs.
  

• Each Kilgetty product installation disk is unique and should be used for one computer only, for security and legal (copyright) reasons. It is permissible to use the installation disk a second time for the process of recovery from loss of TMD as outlined in Appendix A.

• Refer to Kilgetty Kit Contents to ensure that all items you need for installation have been supplied. Should any of these items be missing, consult your supplier.
  
  

• Assemble your Touch Memory Device by clipping it to the Touch Memory Device holder.
  

• Ensure that the Touch Memory Device reader matches the configuration of one of the serial ports on your computer (9 pin D-type connector). If they are different, consult your supplier for an adapter.
  

• Read the appropriate sections of the manual before installation.
  

• Prior to installing Kilgetty, it is strongly recommended that you install all software that is required for use on your computer i.e. Operating System, Applications and Data (though not protectively marked).
  

• You are strongly recommended to back up all data stored on your computer’s hard disk before installation. Your backup should be sufficient to re-install all software currently installed on your computer (Operating System, Applications and Data. Protectively marked data should only be added AFTER Kilgetty is installed)
  

• Ensure that your computer is virus free before installation. Consult the help file information included with your virus protection software for further information.
  

• Check that your computer’s BIOS has a serial port enabled
  

• Check that your computer’s BIOS is not protecting the hard disk boot sector (also called Track 0) from modification. The user manual for your computer should be consulted to discover how to do this. This may be listed in your BIOS options as ‘boot sector virus protection’.
  

• Check that your computer’s BIOS has disabled all sleep and power save modes, otherwise your machine may shut down the screen during encryption of the hard disk giving you no indication of progress, and leaving the machine in an unknown state. The user manual for your computer should be consulted to discover how to do this, and some help may be available in Chapter 7 .
  

• Ensure that the internal battery is fully charged before starting installation.
  
  OR

• Ensure that the laptop is powered from an uninterruptible supply during installation.

• All hard disks in the computer will be encrypted on reboot after running setup.

• A typical Kilgetty installation may require 30 minutes of your time, including 15 minutes to read the relevant sections of the manual. Installation involves encrypting your computer’s entire hard drive(s) which typically (assuming a system with a Pentium 4 CPU) takes approximately 5-10 mins per Gb for most computers although the exact time is computer dependent ⁴. You should make sure that the computer has a permanent power supply and that you have enough time to complete the installation.
  

• Connect the TMR to an available 9 pin serial port provided by your computer, ensure that there are no BIOS conflicts with this port. If the Kilgetty Installation reports that there is a problem with reading the Touch Memory Device, then refer to the Technical Information in Appendix B.

• Boot the computer as usual and log on to Windows with Administrator rights.

• Insert the disk labelled "KILGETTY 2K Version 1.1, Installation Disk" into the CD drive of your computer.

• If Autorun is enabled the CD will start up and a Kilgetty start up screen will be displayed. If the screen is not displayed, open the CD Drive and double-click on Autorun.exe. From this screen it is possible to view the User Manual and launch the installation process.

• Click on the Install software button, and you will see the following screens

• Select "Run this program from its current location" and click OK.
  Then click "Yes" on the SecurityWarning page.

• When the installation process is launched, InstallShield will display a Welcome Screen. Press Next to continue the installation process.

• The installation will then display the License Agreement Terms and Conditions that were issued for Kilgetty 2K v1.1. If you accept the terms, press Next to proceed to the next stage of installation. If you do not agree, press Cancel to abort installation.

• The next screen displayed asks for Customer Information.

• The Setup Type installation screen allows users to select which components of Kilgetty they wish to install. Select Complete to fully install Kilgetty 2K v1.1. Custom Install will only allow the option to not install the User Manual as all other components are required for Kilgetty to function correctly.

• The installation will ask that you enter boot details ⁶ and KLM details. The KLM details will be used for the first use of the KSM. The KLM may later decide to change their password, but the KLM username cannot be changed. You are recommended to choose different details for the KLM than for the boot details to avoid giving every user of the machine access to all the KSM facilities. These details must be recorded as mentioned in Chapter 3.

• Once the usernames and passwords have been entered, the TMD supplied must be read. When the NEXT button is pressed the TMD Input Screen will appear, once the Read TMD button is pressed a window will appear asking for the TMD to be applied to its reader as shown in the photograph.

• Setup for installation is now complete. To install the product, press the Install button. This will make the necessary changes to your hard disk.

• Once Setup has completed, the screen above will be displayed and your computer will need to be rebooted by clicking on the Finish button.

• The hard disk(s) will be encrypted during the reboot. During this process the standard Windows boot screen will be displayed with a progress indicator. NOTE: This indicator gives a value between 0 and 100%, indicating the percentage of the disk encrypted. It is possible that with the value at 100%, there may still be up to around 5-10 minutes of encryption time left.
  

• When the encryption is complete, Windows will continue to load as normal. Your computer is now fully protected by Kilgetty.
  

• Every time your computer is booted, you will have to supply the Touch Memory Device, Boot Username and Boot Password before access to the computer is granted

• Your computer BIOS should now be configured as described in Chapter 7 of this manual.

• You should now return the installation disk to your KLM for safekeeping, together with a record of all details used during installation.

The kilgetty installation media can come in two forms.

1. A full install CD which includes a seed.dat file.
2. An upgrade CD, that also requires a previous installation of Kilgetty 2K v1.0.

• Insert the KILGETTY v1.0 Upgrade medium and run setup.exe

• If autorun is working you will see the Installation Splash Screen where you can click on the Install Software button. In this case you will first see the following screens

• Select "Run this program from its current location" and click OK.
  Then click "Yes" on the SecurityWarning page.

• The Installshield Welcome screen will be displayed, follow the on screen instructions.

• Read, then confirm you agree to the license agrement but clicking the "I accept the terms in the license agreement" button, and clicking Next.

• Next the TMD supplied must be read. On the TMD Input Screen when the "Read TMD" button is pressed a window will appear asking for the TMD to be applied to its reader as shown in the photograph. Click the "Read TMD" button and apply the TMD to the TMR, then click Next.

• On the Boot Username and Password details screen, enter the existing Kilgetty 2K v1.0 boot username and password, then click Next.

• Presuming that the details you supplied are correct, the "Ready to Install the Program" screen appears. Click on the Install button to do the upgrade. Once this has completed click finish to reboot the system.

• Once the PC has rebooted, the upgrade is complete!

• As the hard disk was already encrypted by the installation of Kilgetty 2K v1.0 it will not be encrypted again.

• You should now return the upgrade CD to your KLM for safekeeping, together with a record of all details used during the upgrade.

• See Chapter 10 for the new features for Kilgetty 2K v1.1.

The following facilities must be applied:

• Allow boot from the bootable hard drive only: Disable boot from floppy drive, CD-ROM drive, PC Card slot, network etc.

• Enable BIOS password protection to protect against unauthorised changes to the BIOS configuration.

• Disable Standby / Sleep / Suspend / Hibernate functions.

• Disable disk save function.

As a result of these changes, your BIOS may report an error of the form "Suspend-to-disk partition does not exist. Suspend feature disabled". This error is a direct consequence of updating the BIOS and may be overlooked.

Once this has been read successfully, the user is then prompted to enter their boot username followed by their boot password. If the all the information is entered correctly, the PC will boot as normal. It is highly recommended that the user remove the TMR from the serial port, though it will be necessary to attach it again if access to the Kilgetty Management program is required, and when restarting the PC.

When the PC starts up, the floppy drive will always be in ‘cipher mode’ using the Default Floppy Key, as an additional security feature. Therefore, it will not be possible to access clear disks until the floppy operating mode is changed (see Floppy Disk Manager below).

• The computer MUST BE rebooted when a user logs off. This ensures that user permissions are not compromised.

Possible changes to boot sequence:

1. BIOS password is no longer requested.
2. BIOS password has been reset to default.
3. You are asked to enter the TMD, boot username and boot password twice ⁸ .
4. The computer reboots after you enter the TMD, boot username and boot password.
5. The computer reboots and does not ask for TMD, boot username and boot password.

• The computer should now be handled according to the highest protective marking of stored data.

• The computer MUST NOT BE USED. This helps to determine the extent of the compromise.

• The protective marking of the TMD must immediately be raised to the same level of the highest level of the stored data.

• Contact the Help Desk (Appendix C) to arrange dispatch of the computer for investigation.

To back up data from your Kilgetty hard disk, files should either be:

• Written to the floppy disk drive or other backup medium (e.g. tape drive) unencrypted, in which case the floppy disk (or backup media) takes the protective marking of the highest protective marking of data EVER held on the hard disk.

• Written to the floppy disk drive using the (Default) Floppy Disk Key stored on the machine. See the following table for the protective marking of the floppy disk.

The use of FDKs should be controlled by the KLM (see Chapter 3).

• Reports whether the floppy drive is in the cipher or clear state.

• Reports the state and the currently selected key when the mouse pointer is held over the icon.

• Starts the KSM when the mouse is clicked (once) on the icon.

• Click on the floppy monitor icon in the system tray [After you have entered your login details this will take you to the Floppy Disk Manager Page], or
  

• *NEW* Click on the USB monitor icon in the system tray [After you have entered your login details this will take you to the USB Manager Page], or
  

• Press CTRL-ALT-DEL, then click on the Kilgetty System Manager button [After you have entered your login details this will take you to the Kilgetty Page]

1. The KSM logon dialog box will now be displayed.
2. Type your KSM username and password in the Kilgetty System Manager logon dialog box.
3. You will then be required to apply the TMD to the TMR connected to the PC’s serial port.
4. If the logon is successful you will then have access to the KSM facilities you are authorised to use.

If the logon is unsuccessful the KSM dialog box will display a failed logon message.

1. Check that the correct KSM username and password is used.
2. Check that the correct TMD is used.
3. Rename the useracc.dat file. N.B. This will remove all KSM user accounts apart from the one supplied on installation.

The property pages are:

• Kilgetty - provides the opportunity to change the boot username and/or boot password and to read the serial number of the Touch Memory Device.

• Floppy Disk Manager - provides facilities for selecting the current Floppy Disk Key (FDK) , encrypting and decrypting floppy disks, and changing the operating mode of the floppy disk drive(s). N.B. it is not possible to format a floppy disk on the machine running Kilgetty. A floppy must be formatted outside of Kilgetty.

• Floppy Keys - provides facilities for maintaining the Floppy Disk Key (FDK) data: loading or removing key material, and reading the serial number of the Touch Memory Device.

• User Accounts - provides facilities for the KLM to manipulate the KSM user accounts within the KSM: add or remove users, and define the facilities available to them.

• Personal Details - provides facilities for users to change their KSM password.

• Protect System - provides facilities for rendering the Kilgetty PC inoperable in an emergency: disabling the hard disk and erasing the Touch Memory Device (TMD).

• *NEW* USB Device Manager - provides facilities for managing KSM users' trusted USB device lists: adding and removing USB devices, enabling or disabling them from use, by the KSM user, with the machine. N.B. USB devices must be connected to the machine in order to be added to a KSM user's trusted list.

Help on the use of these facilities can be found from the Kilgetty Help, see the following Section:

• Help Topics

• Help about what you see on the current page of the Kilgetty System Manager

1. Click the Help button on the Kilgetty System Manager logon dialog box.
2. The list of Help Topics appears.
3. You can use the Contents tab in Help to find topics grouped by subject, or use the Index tab or Find tab to search for information by typing in a subject, title, or specific word or phrase.

1. Click the Help button located below the current property page of the Kilgetty System Manager, or press the F1 button.
2. Selecting Help will focus on the facilities provided by the current page, though it can be used to access the help for all other pages.
3. From the KSM Application Help you can access the Help Topics by clicking on the Help Topics at the top of the page.

• Your computer’s data will only be protected by Kilgetty when it is correctly and completely shutdown. Shutdown means that all components in your computer are powered down. You must read the documentation supplied with your computer to establish how to shut it down completely.

• You need to be aware of other methods the computer may use to shutdown completely or partially. This is especially important for laptop computers which can power off individual system devices (PCMCIA cards, hard disks etc.) to conserve battery power without shutting down the entire computer.

• You must disable all standby, sleep, suspend or hibernation functions that your computer may have - see Chapter 7 for details. For instance – closing the lid on some laptop PCs causes entry to a power saving mode which leaves the PC in an unprotected state.

InstallShield offers a standardised interface to the installation process, providing users with a familiar environment that makes the process simpler and more user friendly.

Trusted USB allows KSM account holders to use specified USB devices with the Kilgetty 2K v1.1 installed laptop. These devices are added or removed on individual KSM accounts, allowing different users access to different devices.

The computer MUST BE rebooted when a user logs off. This ensures that user permissions are not compromised.

If the device is not approved, the user will be prompted as to whether they want to add the device to their Trusted List.

N.B. that the level of trust afforded to each device is decided purely by you the user. KILGETTY just enforces that level of trust. KILGETTY does not give you any assurance about the device other than it matches the specification of a device you have already agreed to trust.

The management of a KSM user's trusted device list is performed within the KSM using the USB Device Manager page. On this page it is possible to add devices to or remove devices from the currently logged in KSM user's trusted list, provided that the facility has been enabled by the KLM. Users who do not have these facilities granted must contact their KLM to get devices added or removed.

If you enter your details incorrectly then you will have to either log out and log in again (entering them correctly this time) or stop the USB Monitor and restart it (from Task Manager). You only have one attempt at log in whilst the USB Monitor is running.

The USB Monitor will then interrogate the device you have just inserted and compare it against all devices in your list. If the devices attributes are already in your list then the device will work immediately.

If this was the only external USB device you had inserted, then the icon will change to .

If you do not have that devices details in your list or you have not yet created a list then you will be asked if you want to add that device to your list. This will be in the form of a prompt window

• If you left mouse click the USB Monitor icon, you will be taken directly to the KSM log in page. Once you have logged in, you will be taken directly to the USB Manager page.

• If you right mouse click the USB Monitor icon you will be shown an 'About' window message giving details about the USB Monitor version

• If you hover the mouse over the USB Monitor icon, you will be given a textual display indicating the status of the icon. This will be of particular help to the visually impaired - or if you just forget what the icons represent.

Instructions for the operation of the USB Device Manager are provided below.

On first boot of Kilgetty, all USB device activity is disabled, as are the USB commands in the USB Device Manager. The Enable USB check box must be selected to enable the internal USB hubs and allow external USB devices to be attached. This will then enable all USB Device Manager controls, provided the user has the facility to use them.

• Insert an unregistered USB device. A prompt will be displayed asking if the device should be added. If 'YES' is selected, the KSM will load with the USB Device Manager being the first page displayed.

• Left-Click on the USB Monitor icon in the system tray. This will load the KSM with the USB Device Manager page as the first displayed.

• Load the KSM in the usual way (by pressing Ctrl-Alt-Del & selecting the Kilgetty System Manager button) and navigate to the USB Device Manager Page.

The prohibited list contains all devices attached to the system that have not been blocked and are not in the KSM user's allowed list.

The allowed list contains those devices which have been added along with all internal USB hubs directly connected to the motherboard.

Internal devices are automatically added to every user's Allowed List and can be identified by the NON-REMOVABLE INTERNAL DEVICE text appearing in the device description when the device is selected.

To add a device to the currently logged on KSM user's list, simply select the desired device from the prohibited list and press the Add button. When the device is selected, information about the device will be displayed in the bottom window of the USB Device Manager. Once the add button is pressed the device will be transferred to the allowed list. This change will not be written to file until the Confirm Changes button is pressed. If the Cancel button is pressed all changes will be lost.

It is only possible to select 1 device from a list at a time. If you wish to add all the devices in the prohibited list select the Add All button. This will copy every device in the prohibited list to the allowed list. This change will not be written to file until the Confirm Changes button is pressed. If the Cancel button is pressed all changes will be lost.

All USB devices have the facility to store a serial number which can be used to identify a particular device. If this serial number is not present then the device is non-unique. If a non-unique device is added to a trusted list, it is possible for the user to attach and use any device of the same model, whereas if the device is unique only the device added to the list can be used.

When the system detects a non-unique device a prompt will be displayed asking if the user is sure that they wish to add the device. The prompt for the addition of non-unique devices varies depending on whether the Add button or the Add All button has been selected. If the Add button is selected the prompt displayed is the same as the one shown below.

• Yes - The device is added to the allowed list and all devices of the same model can be used.
• No - The device is not added to the allowed list.

• Yes - The device is added to the allowed list and all devices of the same model can be used. The next item in the prohibited list will be evaluated and added.

• No - The device will not be added and the next device in the prohibited list will be evaluated and added.

• Cancel - The device will not be added and the Add All procedure will be terminated.

It is possible some devices attached to the system have internal hubs, which means they will have more than 1 entry in the allowed list. Both entries must be removed from the prohibited list for the device to be fully blocked.

To remove a device from the currently logged on KSM user's list, simply select the desired device from the allowed list and press the Remove button. When the device is selected, information about the device will be displayed in the bottom window of the USB Device Manager. Once the Remove button is pressed the device will be transferred to the prohibited list. This change will not be written to file until the Confirm Changes button is pressed. If the Cancel button is pressed all changes will be lost.

In every user's trusted list there will be some devices that have not been added by the user. These are internal hubs that are directly connected to the system motherboard. These devices are automatically added to the trusted list as it would not be possible to use any other USB device without them. It is not possible to remove internal devices from the system, if an attempt is made the following message box will appear.

To allow a user to add or remove USB devices to and from their Trusted USB device list, the facility must be added using the KSM User Accounts Property Page.

1. Log into the KSM as the KLM or other user who is allowed to grant user facilities.
2. Navigate to the User Accounts page.
3. From the drop down box, select the KSM user who is to have the facilities granted.
4. Highlight the relevant USB facility from the Functions Not Available list.
5. Press Add.
6. Repeat steps 4 and 5 for each of the desired USB Manager facilities.
7. Users must also have the Confirm USB Changes facility.
8. Once all the required facilities have been added, press Confirm Changes.

1. Log into the KSM as the KLM or other user who is allowed to remove user facilities.
2. Navigate to the User Accounts page.
3. From the drop down box, select the KSM user who is to have the facilities removed.
4. Highlight the relevant USB facility from the Functions Available list.
5. Press Remove.
6. Repeat steps 4 and 5 for each of the desired USB Manager facilities
7. Once all the required facilities have been added, press Confirm Changes.

For every other KSM account created this option is turned off.

If the KSM user requires access to use a USB device but not access to the facilities to modify their Trusted USB list, then the KLM should modify the users list.

The procedure for doing this is outlined below. It is assumed that the user account has already been created and that no devices have been inserted. If a device has been inserted please restart the machine.

1. Log into the KSM as the KLM.
2. Navigate to the User Accounts page.
3. From the drop down box, select the KSM user who need to use the device.
4. Highlight the Add USB Device facility from the Functions Not Available list.
5. Press Add.
6. Press Confirm Changes and log out of the KSM. <