Manual
Table Of Contents
- Preface
- Chapter 1. Overview
- Chapter 2. Installation
- Chapter 3. Working with Client Security Solution
- Chapter 4. Working with ThinkVantage Fingerprint Software
- Chapter 5. Working with Lenovo Fingerprint Software
- Chapter 6. Best Practices
- Deployment examples for installing Client Security Solution
- Switching Client Security Solution modes
- Corporate Active Directory rollout
- Standalone Install for CD or script files
- System Update
- System Migration Assistant
- Generating a certificate using key generation in the TPM
- Using USB fingerprint keyboards with 2008 ThinkPad notebook computer models (R400/R500/T400/T500/W500/X200/X301)
- Appendix A. Special considerations for using the Lenovo Fingerprint Keyboard with some ThinkPad notebook models
- Appendix B. Synchronizing password in Client Security Solution after the Windows password is reset
- Appendix C. Using Client Security Solution on a reinstalled Windows operating system
- Appendix D. Using the TPM on ThinkPad notebook computers
- Appendix E. Notices
- Glossary
Securemodeandconvenientmode
FingerprintSoftwarecanberunintwosecuritymodes,asecuremodeandaconvenientmode.Thesecure
modeisintendedforsituationswhenyouwanttoachievehighersecurity.Specialfunctionsarereservedfor
administratorsonly.Onlyadministratorscanlogonusingpasswordwithoutadditionalauthentication.
Theconvenientmodeisintendedforhomecomputerswhereahighsecuritylevelisnotsoimportant.Allthe
userscanperformalloperations,includingeditingpassportsofotherusersandpossibilitytologontothe
systemusingpassword(withoutngerprintauthentication).
Anadministratorisanymemberoflocaladministratorsgroup.Afteryousetthesecuremode,onlythe
administratorcantoggleitbacktotheconvenientmode.
Securemode-administrator
Toenhancesecurity,ifthewrongusernameorpasswordistypedatlogon,thesecuremodedisplaysthe
followingmessage:“Onlyadministratorscanlogonthiscomputerwithusernameandpassword.”
Table27.Optionsforadministratorsinthesecuremode
FingerprintsDescription
Createanewpassport
Administratorscancreatetheirownpassportandthey
canalsocreatethepassportofalimiteduser.
EditPassportsAdministratorscaneditonlytheirownpassport.
DeletePassportAdministratorscandeletealllimiteduserandother
administratorpassports.Ifotherusersareusingpower-on
security,theadministratorwillhavetheoptiontoremove
usertemplatesfrompower-onsecurityatthistime.
Power-onSecurity
AdministratorscandeleteLimiteduserandadministrator
ngerprintsusedinpower-on.
Note:Theremustatleastbeonengerprintpresentwhen
power-onmodeisenabled.
Settings
LogonsettingsAdministratorscanmakechangestoalllogonsettings.
ProtectedscreensaverAdministratorscanaccess.
PassporttypeAdministratorscanaccess-onlyrelevantwithserver.
Securitymode
Administratorscantogglebetweensecureandconvenient
modes.
ProServers
Administratorscanaccess-onlyrelevantwithserver.
Securemode-limiteduser
DuringaWindowslogon,alimitedusermustuseangerprinttologon.Ifthelimiteduserngerprintreader
isnotworking,anadministratorwillneedtochangethengerprintsoftwaresettingtoconvenientmodeto
enableusernameandpasswordaccess.
Table28.Optionsforlimitedusersinthesecuremode
SettingDescription
Createanewpassport
Limitedusercannotaccess.
EditPassportsLimitedusercaneditonlytheirownpassport.
Chapter4.WorkingwithThinkVantageFingerprintSoftware49