Manual
Table Of Contents
- Preface
- Chapter 1. Overview
- Chapter 2. Installation
- Chapter 3. Working with Client Security Solution
- Chapter 4. Working with ThinkVantage Fingerprint Software
- Chapter 5. Working with Lenovo Fingerprint Software
- Chapter 6. Best Practices
- Deployment examples for installing Client Security Solution
- Switching Client Security Solution modes
- Corporate Active Directory rollout
- Standalone Install for CD or script files
- System Update
- System Migration Assistant
- Generating a certificate using key generation in the TPM
- Using USB fingerprint keyboards with 2008 ThinkPad notebook computer models (R400/R500/T400/T500/W500/X200/X301)
- Appendix A. Special considerations for using the Lenovo Fingerprint Keyboard with some ThinkPad notebook models
- Appendix B. Synchronizing password in Client Security Solution after the Windows password is reset
- Appendix C. Using Client Security Solution on a reinstalled Windows operating system
- Appendix D. Using the TPM on ThinkPad notebook computers
- Appendix E. Notices
- Glossary
SoftwareemulationoftheTrustedPlatformModule
ClientSecuritySolutionhastheoptiontorunwithoutaTrustedPlatformModuleonqualiedsystems.The
functionalitywillbethesameexceptitwillusesoftware-basedkeysinsteadofusinghardware-protected
keys.Thesoftwarecanalsobeinstalledwithaswitchtoforceittoalwaysusesoftware-basedkeysinstead
ofleveragingtheTrustedPlatformModule.Theuseofthisswitchisaninstallation-timedecision,andcannot
bereversedwithoutun-installingandreinstallingthesoftware.
ThesyntaxtoforceasoftwareemulationoftheTrustedPlatformModuleis:
InstallFile.exe“/vEMULATIONMODE=1”
Installationproceduresandcommand-lineparameters
TheMicrosoftWindowsInstallerprovidesseveraladministrativefunctionsthroughcommand-line
parameters.TheWindowsInstallercanperformanadministrativeinstallationofanapplicationorproductto
anetworkforusebyaworkgrouporforcustomization.Command-lineoptionsthatrequireaparametermust
bespeciedwithnospacebetweentheoptionanditsparameter.Forexample:
setup.exe/s/v"/qnREBOOT=”R”"
isvalid,while
setup.exe/s/v"/qnREBOOT=”R”"
isnot.
Note:Thedefaultbehavioroftheinstallationwhenexecutedalone(runningsetup.exewithoutany
parameters)istoprompttheusertorebootattheendoftheinstallation.Arebootisrequiredfortheprogram
tofunctionproperly.Therebootcanbedelayedthroughacommandlineparameterforasilentinstallation
asdocumentedintheprecedingsectionandintheexamplesection.
FortheClientSecuritySolutioninstallationpackage,anadministrativeinstallationunpackstheinstallation
sourcelestoaspeciedlocation.
Torunanadministrativeinstallation,runthesetuppackagefromthecommandlineusingthe/aparameter:
setup.exe/a
Anadministrativeinstallationpresentsawizardthatpromptstheadministrativeusertospecifythelocations
forunpackingthesetuples.ThedefaultextractlocationisC:\.Y oucanchooseanewlocationthatmay
includedrivesotherthanC:\(forexample,otherlocaldrivesormappednetworkdrives).Youcanalso
createnewdirectoriesduringthisstep.
Torunanadministrativeinstallationsilently,youcansetthepublicpropertyTARGETDIRonthecommand
linetospecifytheextractlocation:
setup.exe/s/v"/qnTARGETDIR=F:\TVTRR"
or
msiexec.exe/i"ClientSecurity-PasswordManager.msi"/qnTARGERDIR=F:\TVTRR
Note:IfyouarenotusingthelatestversionofWindowsInstaller,thesetup.exelewillbeconguredto
updatetheWindowsInstallerenginetothelatestversion.TheupdateoftheWindowsInstallerenginewill
promptyoutorebootthesystemeveninanadministrativeextractinstallation.Topreventarebootinthis
situation,youcanusetheREBOOTpropertyoftheWindowsInstaller.IftheWindowsInstalleristhelatest
version,thesetup.exelewillnotattempttoupdatetheWindowsInstallerengine.
Onceandadministrativeinstallationhasbeencompleted,theadministrativeusercanmakecustomizations
tothesourceles,suchasaddingsettingstotheregistry.
Chapter2.Installation7