Manual
Table Of Contents
- Preface
- Chapter 1. Overview
- Chapter 2. Installation
- Chapter 3. Working with Client Security Solution
- Chapter 4. Working with ThinkVantage Fingerprint Software
- Chapter 5. Working with Lenovo Fingerprint Software
- Chapter 6. Best Practices
- Deployment examples for installing Client Security Solution
- Switching Client Security Solution modes
- Corporate Active Directory rollout
- Standalone Install for CD or script files
- System Update
- System Migration Assistant
- Generating a certificate using key generation in the TPM
- Using USB fingerprint keyboards with 2008 ThinkPad notebook computer models (R400/R500/T400/T500/W500/X200/X301)
- Appendix A. Special considerations for using the Lenovo Fingerprint Keyboard with some ThinkPad notebook models
- Appendix B. Synchronizing password in Client Security Solution after the Windows password is reset
- Appendix C. Using Client Security Solution on a reinstalled Windows operating system
- Appendix D. Using the TPM on ThinkPad notebook computers
- Appendix E. Notices
- Glossary
Whenruninsilentmode,theoutputoftheprogramwillbeanerrorlevelcorrespondingtotheerrors
numbersshownabove.
UsingtheXMLSchema
ThepurposeoftheXMLscriptingistoenableITadministratorstocreatecustomscriptsthatcanbeused
todeployandcongureClientSecuritySolution.Thescriptscanbeprotectedbythexml_crypt_tool
executablewithapasswordsuchasAESencryption.Oncecreated,thevirtualmachine(vmserver.exe)
acceptsthescriptsasinput.ThevirtualmachinecallsthesamefunctionsastheClientSecuritySolution
SetupWizardtocongurethesoftware.
AllofthescriptsconsistofonetagtospecifytheXMLencodingtype,theXMLschema,andatleastone
functiontoperform.TheschemaisusedtovalidatetheXMLleandchecktoseethattherequired
parametersarepresent.Theuseofschemaisnotcurrentlyenforced.Eachfunctionisenclosedinafunction
tag.Eachfunctioncontainsanorder,thisspeciesinwhatorderthecommandwillbeexecutedbythe
virtualmachine(vmserver.exe).Eachfunctionhasaversionnumberaswell;currentlyallofthefunctions
areatversion1.0.Eachoftheexamplescriptsbelowonlycontainonefunction.However,apracticea
scriptwouldmostlikelycontainmultiplefunctions.TheClientSecuritySolutionSetupWizardcanbe
usedtocreatesuchascript.Foradditionalinformationaboutcreatingscriptswiththesetupwizard,see
“ClientSecuritySolutionsetupwizard”onpage36
.
Note:Iftheparameter<DOMAIN_NAME_PARAMETER>isleftoutinanyofthefunctionsthatrequirea
domainname,thenthedefaultcomputernameofthesystemwillbeused.
Examples
ThefollowingcommandsareexamplesoftheXMLSchema:
ENABLE_TPM_FUNCTION
ThiscommandenablestheTrustedPlatformModuleandusestheargumentSYSTEM_PAP.Ifthesystem
alreadyhasaBIOSadministratororsupervisorpasswordset,thenthisargumentmustbeprovided.
Otherwise,thiscommandisoptional.
<tvt_deploymentxmlns="http://www.lenovo.com"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"xsi:schemaLocation="
http://www.lenovo.comcssDeploy.xsd">
<registry_settings/>
</tvt_deployment>
<FUNCTION>
<ORDER>0001</ORDER>
<COMMAND>ENABLE_TPM_FUNCTION</COMMAND>
<VERSION>1.0</VERSION>
<SYSTEM_PAP>PASSWORD</SYSTEM_PAP>
</FUNCTION>
</CSSFile>
Note:Thiscommandisnotsupportedintheemulationmode.
DISABLE_TPM_FUNCTION
ThiscommandusestheargumentSYSTEM_PAP.IfthesystemalreadyhasaBIOSadministratoror
supervisorpasswordset,thenthisargumentmustbeprovided.Otherwise,thiscommandisoptional.
<tvt_deploymentxmlns="http://www.lenovo.com"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"xsi:schemaLocation="
http://www.lenovo.comcssDeploy.xsd">
<registry_settings/>
</tvt_deployment
<FUNCTION>
26ClientSecuritySolution8.3DeploymentGuide