Manual
Table Of Contents
- Preface
- Chapter 1. Overview
- Chapter 2. Installation
- Chapter 3. Working with Client Security Solution
- Chapter 4. Working with ThinkVantage Fingerprint Software
- Chapter 5. Working with Lenovo Fingerprint Software
- Chapter 6. Best Practices
- Deployment examples for installing Client Security Solution
- Switching Client Security Solution modes
- Corporate Active Directory rollout
- Standalone Install for CD or script files
- System Update
- System Migration Assistant
- Generating a certificate using key generation in the TPM
- Using USB fingerprint keyboards with 2008 ThinkPad notebook computer models (R400/R500/T400/T500/W500/X200/X301)
- Appendix A. Special considerations for using the Lenovo Fingerprint Keyboard with some ThinkPad notebook models
- Appendix B. Synchronizing password in Client Security Solution after the Windows password is reset
- Appendix C. Using Client Security Solution on a reinstalled Windows operating system
- Appendix D. Using the TPM on ThinkPad notebook computers
- Appendix E. Notices
- Glossary
Table20.ComputerConguration➙Administrativetemplates➙ThinkVantage➙ClientSecuritySolution➙
Authenticationpolicies➙Defaultmode(continued)
PolicyEnabledsettingsDescription
Fingerprint
YoucansetthefrequencytoeitherEverytime,or
Onceperlogon.
Controlswhetherngerprintisrequired.
OverrideSettooverridethepassword,passphrase,or
ngerprint.
Denes“fallback”authentication
requirementsifnormalauthentication
fails.
AuthenticationPolicies
Thefollowinglistofpoliciescontainenabledsettingsthatdenetheauthenticationlevelofeachpolicy:
•Windowslogonauthenticationlevel
•Systemunlockauthenticationlevel
•Passwordmanagerauthenticationlevel
•CSPsignatureauthenticationlevel
•CSPdecryptionauthenticationlevel
•PKCS#11signatureauthenticationlevel
•PKCS#11decryptionauthenticationlevel
•PKCS#11logonauthenticationlevel
Thefollowingtableprovidesvaluesandsettingsfortheprecedingauthenticationlevels:
Table21.ComputerConguration➙Administrativetemplates➙ThinkVantage➙ClientSecuritySolution➙
Authenticationpolicies
PolicyEnabledsettingsDescription
Password
SetthefrequencytoeitherEverytime,orOnce
perlogon.
Controlswhetherpasswordisrequired.
Passphrase
SetthefrequencytoeitherEverytime,orOnce
perlogon.
Controlswhetherpassphraseis
required.
Fingerprint
SetthefrequencytoeitherEverytime,orOnce
perlogon.
Controlswhetherngerprintisrequired.
OverrideSettooverridethepassword,passphrase,or
ngerprint.
Denes“fallback”authentication
requirementsifnormalauthentication
fails.
Passwordmanager
ThefollowingtableprovidespolicysettingsforPasswordmanager.
Table22.ComputerConguration➙ThinkVantage➙ClientSecuritySolution➙Passwordmanager
PolicysettingDescription
DisablePasswordmanager
ControlswhetherPasswordmanagerwillstartwhenthesystemstarts.
DisableInternetExplorersupport
ControlswhetherPasswordmanagerwillbeabletostorepasswordsfrom
InternetExplorer.
DisableMozillasupport
ControlswhetherPasswordmanagerwillbeabletostorepasswordsfrom
Mozilla-basedbrowsers,includingFirefoxandNetscape.
DisablesupportforWindows
applications
ControlswhetherPasswordmanagerwillbeabletostorepasswordsfrom
Windowsapplications.
Chapter3.WorkingwithClientSecuritySolution43