Manual
Table Of Contents
- Preface
- Chapter 1. Overview
- Chapter 2. Installation
- Chapter 3. Working with Client Security Solution
- Chapter 4. Working with ThinkVantage Fingerprint Software
- Chapter 5. Working with Lenovo Fingerprint Software
- Chapter 6. Best Practices
- Deployment examples for installing Client Security Solution
- Switching Client Security Solution modes
- Corporate Active Directory rollout
- Standalone Install for CD or script files
- System Update
- System Migration Assistant
- Generating a certificate using key generation in the TPM
- Using USB fingerprint keyboards with 2008 ThinkPad notebook computer models (R400/R500/T400/T500/W500/X200/X301)
- Appendix A. Special considerations for using the Lenovo Fingerprint Keyboard with some ThinkPad notebook models
- Appendix B. Synchronizing password in Client Security Solution after the Windows password is reset
- Appendix C. Using Client Security Solution on a reinstalled Windows operating system
- Appendix D. Using the TPM on ThinkPad notebook computers
- Appendix E. Notices
- Glossary
Table30.Optionsforlimitedusersintheconvenientmode(continued)
SettingsDescription
Securitymode
Limiteduserscannotmodifysecuritymodes.
ProServers
Limiteduserscanaccess-onlyrelevantwithserver.
Congurablesettings
Somengerprintsoftwareoptionscanbeconguredthroughregistrysettings.
•Preboot/power-onsoftwareinterface:Themechanismforenablingngerprintprebootorpower-on
supportandstoringngerprintsonthecompanionchipisnotnormallydisplayedinthengerprint
softwareunlessthereareBIOSorharddrivepasswordssetonthesystem.Inordertooverridethis
behaviorandforcetheseoptionstobeshownwithouttheexistenceofBIOSorharddrivepasswords,
addoneofthefollowing,thatapplytoyourcomputermachinetype,totheregistry:
[HKEY_LOCAL_MACHINE\SOFTWARE\ProtectorSuiteQL\1.0]
REG_DWORD"BiosFeatures"=2
or,
[HKEY_LOCAL_MACHINE\SOFTWARE\ProtectorSuiteQL\1.0]
REG_DWORD"BiosFeatures"=4
ThissettingisusefulwhenSafeGuardEasyisinstalledonasystemwithoutBIOSpasswordsandis
utilizingngerprintauthenticationtodecrypttheharddrive.
•Sounds:Thengerprintsoftwarecanbeconguredtoplayasoundcontainedina.wavleundervarious
circumstanceduringthengerprintauthenticationprocess.Theregistrysettingsforthesesoundsare
asfollows:
[HKEY_LOCAL_MACHINE\SOFTWARE\ProtectorSuiteQL\1.0\settings]
‘Success’
REG_SZ“sndSuccess”=[pathtosoundle]
Theledesignatedwillplaywheneverasuccessfulswipeisregistered.
‘Failure’
REG_SZ“sndFailure”=[pathtosoundle]
Theledesignatedwillplaywheneveranunsuccessfulswipeisattempted.
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\ngerprint
‘Scan’
REG_SZ“sndScan”=[pathtosoundle]
Theledesignatedwillplaywheneverthengerprintverication
dialogisdisplayedforClientSecuritySolution-relatedoperations.
Ifthevalueisnotpresentorisemptythennosoundisplayed.
Quality’
REG_SZ“sndQuality”=[pathtosoundle]
Theledesignatedwillplaywheneveranunreadableswipehasoccurred.
Ifthevalueisnotpresentorisemptythennosoundisplayed.
•Passwordvalidationduringsystemunlock:Bydefault,thengerprintsoftwarevalidatesstored
passwordduringsystemunlock.Thevalidationrequirescontactingthedomaincontrollerandmight
causedelay.Toavoidthedelay,disablethepasswordvalidationduringsystemunlockandbyediting
theregistryasfollows:
[HKEY_LOCAL_MACHINE\SOFTWARE\ProtectorSuiteQL\1.0\settings]
REG_DWORD"DoNotTestUnlock"=1
Chapter4.WorkingwithThinkVantageFingerprintSoftware51