Manual

Contents
Preface................iii
Chapter1.Overview...........1
ClientSecuritySolution............1
ClientSecuritySolutionpassphrase.....2
ClientSecuritypasswordrecovery......2
ClientSecurityPasswordManager......2
SecurityAdvisor.............3
CerticateTransferwizard.........3
Hardwarepasswordreset.........3
SupportforsystemswithoutTrustedPlatform
Module.................3
FingerprintSoftware.............4
Chapter2.Installation..........5
ClientSecuritySolution............5
Installationrequirements..........5
Custompublicproperties..........5
TrustedPlatformModulesupport......6
Installationproceduresandcommand-line
parameters...............7
Usingmsiexec.exe............8
StandardWindowsInstallerpublic
properties...............10
Installationlogle...........11
InstallingThinkVantageFingerprintSoftware...12
Silentinstallation............12
Options................12
InstallingLenovoFingerprintSoftware.....14
Silentinstallation............15
Options................15
SystemsManagementServer.........17
Chapter3.WorkingwithClient
SecuritySolution...........19
UsingtheTrustedPlatformModule.......19
UsingtheTrustedPlatformModulewith
Windows7..............19
ManagingClientSecuritySolutionwith
cryptographickeys.............19
TakeOwnership............20
EnrollUser..............21
Softwareemulation...........22
Systemboardswap...........23
EFSprotectionutility..........25
UsingtheXMLSchema...........26
Examples...............26
UsingRSASecurIDtokens..........32
InstallingtheRSASecurIDSoftwareToken..32
Requirements.............33
SettingtheSmartCardAccessOptions...33
InstallingtheRSASecurIDSoftwareToken
manually...............33
ActiveDirectorySupport.........33
Settingsandpoliciesforthengerprintreader
authentication...............34
Enforcedngerprintbypassoption.....34
Fingerprintswiperesult.........34
Command-linetools............34
SecurityAdvisor............35
ClientSecuritySolutionsetupwizard....36
Deploymentleencryptordecrypttool...36
Deploymentleprocessingtool......37
TPMENABLE.EXE...........37
CerticateTransfertool.........37
ActivatingordeactivatingtheTPM.....38
ActiveDirectorySupport...........40
Administrative(ADM)templateles.....41
GroupPolicysettings..........42
Chapter4.Workingwith
ThinkVantageFingerprintSoftware.47
Managementconsoletool..........47
User-speciccommands.........47
Globalsettingscommands........48
Securemodeandconvenientmode......49
Securemode-administrator.......49
Securemode-limiteduser........49
Convenientmode-administrator.....50
Convenientmode-limiteduser......50
Congurablesettings..........51
FingerprintSoftwareandNovellNetwareClient..52
Authenticating.............52
ThinkVantageFingerprintSoftwareservice....53
Chapter5.WorkingwithLenovo
FingerprintSoftware.........55
Managementconsoletool..........55
LenovoFingerprintSoftwareservice......55
ActiveDirectorysupportforLenovoFingerprint
Software.................55
Chapter6.BestPractices.......57
DeploymentexamplesforinstallingClientSecurity
Solution.................57
Scenario1..............57
©CopyrightLenovo2008,2011
i