Manual
Table Of Contents
- Preface
- Chapter 1. Overview
- Chapter 2. Installation
- Chapter 3. Working with Client Security Solution
- Chapter 4. Working with ThinkVantage Fingerprint Software
- Chapter 5. Working with Lenovo Fingerprint Software
- Chapter 6. Best Practices
- Deployment examples for installing Client Security Solution
- Switching Client Security Solution modes
- Corporate Active Directory rollout
- Standalone Install for CD or script files
- System Update
- System Migration Assistant
- Generating a certificate using key generation in the TPM
- Using USB fingerprint keyboards with 2008 ThinkPad notebook computer models (R400/R500/T400/T500/W500/X200/X301)
- Appendix A. Special considerations for using the Lenovo Fingerprint Keyboard with some ThinkPad notebook models
- Appendix B. Synchronizing password in Client Security Solution after the Windows password is reset
- Appendix C. Using Client Security Solution on a reinstalled Windows operating system
- Appendix D. Using the TPM on ThinkPad notebook computers
- Appendix E. Notices
- Glossary
Note:Thiscommandisnotsupportedintheemulationmode.
INITIALIZE_SYSTEM_FUNCTION
ThiscommandinitializestheClientSecuritySolutionsystemfunction.Thesystem-widekeysaregenerated
throughthisfunctioncall.Thefollowinglistofparametersexplaineachfunction:
•NEW_OWNER_AUTH_DATA_PARAMETER
Thisparameterisusedtosetthenewownerpasswordforthesystem.Forthenewownerpassword,the
valueforthisparameteriscontrolledbythecurrentownerpassword.Ifthecurrentownerpasswordisnot
set,thenthevalueinthisparameterispassed,andbecomesthenewownerpassword.Ifthecurrent
ownerpasswordisalreadysetandtheadministratorusesthesamecurrentownerpassword,then
thatvalueinthisparameterispassed.Iftheadministratorusesanewownerpassword,thenthenew
ownerpasswordwillbepassedinthisparameter.
•CURRENT_OWNER_AUTH_DATA_PARAMETER
Thisparameteristhecurrentownerpasswordofthesystem.Ifthesystemalreadyhasanexisting
ownerpassword,thenthisparametershouldpassthepreviouspassword.Ifanewownerpasswordis
requested,thenthecurrentownerpasswordispassedinthisparameter.Ifnopasswordchangeis
congured,thenthevalueNO_CURRENT_OWNER_AUTHispassed.
<tvt_deploymentxmlns="http://www.lenovo.com"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"xsi:schemaLocation="
http://www.lenovo.comcssDeploy.xsd">
<registry_settings/>
</tvt_deployment
<FUNCTION>
<ORDER>0001</ORDER>
<COMMAND>INITIALIZE_SYSTEM_FUNCTION</COMMAND>
<NEW_OWNER_AUTH_DATA_PARAMETER>pass1word</NEW_OWNER_AUTH_DATA_
PARAMETER>
<CURRENT_OWNER_AUTH_DATA_PARAMETER>No_CURRENT_OWNER_AUTH</CURRENT
_OWNER_AUTH_DATA_PARAMETER>
<VERSION>1.0</VERSION>
</FUNCTION>
</CSSFile>
CHANGE_TPM_OWNER_AUTH_FUNCTION
ThiscommandchangestheClientSecuritySolutionAdministratorauthorization,andupdatesthesystem
keysaccordingly.Thesystem-widekeysareregeneratedthroughthisfunctioncall.Theparametersare:
•NEW_OWNER_AUTH_DATA_PARAMETER
ThenewownerpasswordoftheTrustedPlatformModule.
•CURRENT_OWNER_AUTH_DATA_PARAMETER
ThecurrentownerpasswordoftheTrustedPlatformModule.
<tvt_deploymentxmlns="http://www.lenovo.com"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"xsi:schemaLocation="
http://www.lenovo.comcssDeploy.xsd">
<registry_settings/>
</tvt_deployment
<FUNCTION>
<ORDER>0001</ORDER>
<COMMAND>CHANGE_TPM_OWNER_AUTH_FUNCTION</COMMAND>
<NEW_OWNER_AUTH_DATA_PARAMETER>newPassWord</NEW_OWNER_AUTH_DATA_
PARAMETER>
<CURRENT_OWNER_AUTH_DATA_PARAMETER>oldPassWord</CURRENT_OWNER_AUTH
_DATA_PARAMETER>
<VERSION>1.0</VERSION>
</FUNCTION>
</CSSFile>
30ClientSecuritySolution8.3DeploymentGuide