Manual

Chapter6.BestPractices

ThischapterpresentsscenariostoillustratethebestpracticesofClientSecuritySolutionandFingerprint

Software.Thisscenariostartswiththecongurationoftheharddiskdrive,continuesthroughseveral

updates,andfollowsthelifecycleofadeployment.InstallationonbothLenovoandnon-Lenovocomputers

isdescribed.

DeploymentexamplesforinstallingClientSecuritySolution

ThefollowingsectionprovidesexamplesofinstallingClientSecuritySolutiononbothdesktopsand

notebookcomputers.

Scenario1

Thisisanexampleofaninstallationonadesktopcomputerusingthesehypotheticalcustomerrequirements:

•Administration

–Usethelocaladministratoraccountforadministrationofthecomputer.

•ClientSecuritySolution

–InstallandruninEmulationMode.

–NotalloftheLenovosystemshaveaTrustedPlatformModule(securitychip).

–EnableClientSecuritypassphrase.

–ProtectClientSecuritySolutionapplicationsthroughapassphrase.

–EnableClientSecurityWindowslogon.

–LogintoWindowswithClientSecuritypassphrase.

–EnableEnd-UserPassphraseRecoveryfeature.

–Allowuserstorecovertheirpassphrasebyansweringthreeuserdenedquestionandanswers.

–EncryptClientSecuritySolutionXMLScriptwithpassword=“XMLscriptPW”.

–PasswordprotecttheClientSecuritySolutioncongurationle.

–Fingerprintsoftwaremayormaynotbeinstalled.

Onthepreparationmachine:

1.LoginwiththeWindows“localadministrator”account.

2.InstalltheClientSecuritySolutionprogramwiththefollowingoptions:

ClientSecuritySolution:tvtcss82_xxxx.exe/s/v"/qn“EMULATIONMODE=1”

(whereXXXXisthebuildID)

“NOCSSWIZARD=1””

3.Afterreboot,loginwiththeWindowslocaladministratoraccountandpreparetheXMLscriptfor

deployment.Fromthecommandline,runthiscommand:

“C:\ProgramFiles\Lenovo\ClientSecuritySolution\css_wizarde.exe”

/name:C:\ThinkCentre

Selectthefollowingoptionsinthewizard:

•ClickSecurelogonmethod➙Next.

•TypetheWindowspasswordfortheadministratoraccountandclickNext.(WPW4Adminforexample)