Manual
Table Of Contents
- Preface
- Chapter 1. Overview
- Chapter 2. Installation
- Chapter 3. Working with Client Security Solution
- Chapter 4. Working with ThinkVantage Fingerprint Software
- Chapter 5. Working with Lenovo Fingerprint Software
- Chapter 6. Best Practices
- Deployment examples for installing Client Security Solution
- Switching Client Security Solution modes
- Corporate Active Directory rollout
- Standalone Install for CD or script files
- System Update
- System Migration Assistant
- Generating a certificate using key generation in the TPM
- Using USB fingerprint keyboards with 2008 ThinkPad notebook computer models (R400/R500/T400/T500/W500/X200/X301)
- Appendix A. Special considerations for using the Lenovo Fingerprint Keyboard with some ThinkPad notebook models
- Appendix B. Synchronizing password in Client Security Solution after the Windows password is reset
- Appendix C. Using Client Security Solution on a reinstalled Windows operating system
- Appendix D. Using the TPM on ThinkPad notebook computers
- Appendix E. Notices
- Glossary
Table11.Parameters(continued)
ParametersDescription
EmbeddedSecurityChipSetsvaluethatsecuritychipshouldbeenabled,orsetting
willbeagged.
ClientSecuritySolutionSetsvalueofwhatversionClientSecuritySolutionshould
beonthismachine,orsettingwillbeagged.
ClientSecuritySolutionsetupwizard
TheClientSecuritySolutionsetupwizardisusedtogeneratedeploymentscriptsthroughXMLles.The
followingcommanddisplaysthedifferentfunctionsofthewizard:
"C:\ProgramFiles\Lenovo\ClientSecuritySolution\css_wizard.exe"/?
ThefollowingtableprovidesthecommandsfortheClientSecuritySolutionsetupwizard.
Table12.CommandsfortheClientSecuritySolutionsetupwizard
ParameterResult
/hor/?
Displaysthehelpmessagebox
/name:FILENAME
Precedesthefullyqualiedpathandlenameforthe
generateddeploymentle.Thelewillhavean.xml
extension.
/encryptEncryptsthescriptleusingAESencryption.The
lenamewillbeappendedwith.encifitisencrypted.If
the/passcommandisnotused,astaticpassphraseis
usedtoobscurethele.
/pass:
Precedesthepassphraseforprotectionoftheencrypted
deploymentle.
/novalidate
Disablesthepasswordandpassphrasechecking
capabilitiesofthewizardsoascriptlecanbecreated
onaalreadyconguredmachine.Forexample,the
administratorpasswordonthecurrentmachinemight
notbetheadministratorpassworddesiredacrossthe
enterprise.Usethe/novalidatecommandtoallowyou
totypeadifferentadministratorpassworditintothe
css_wizardGUIduringxmllecreation.
Example:
css_wizard.exe/encrypt/pass:mysecret/name:C:\DeployScript/novalidate
Deploymentleencryptordecrypttool
ThistoolisusedtoencryptordecryptClientSecurityXMLdeploymentles.Thefollowingcommand
displaysthedifferentfunctionsofthetool:
"C:\ProgramFiles\Lenovo\ClientSecuritySolution\xml_crypt_tool.exe"/?
Theparametersareshowninthefollowingtable:
Table13.ParametersforencryptingordecryptingClientSecurityXMLdeploymentles
ParametersResults
/hor/?
Displaysthehelpmessage.
FILENAME
Displayspathnameandlenamewitheither.xmlor.enc
extension.
36ClientSecuritySolution8.3DeploymentGuide