Manual
Table Of Contents
- Preface
- Chapter 1. Overview
- Chapter 2. Installation
- Chapter 3. Working with Client Security Solution
- Chapter 4. Working with ThinkVantage Fingerprint Software
- Chapter 5. Working with Lenovo Fingerprint Software
- Chapter 6. Best Practices
- Deployment examples for installing Client Security Solution
- Switching Client Security Solution modes
- Corporate Active Directory rollout
- Standalone Install for CD or script files
- System Update
- System Migration Assistant
- Generating a certificate using key generation in the TPM
- Using USB fingerprint keyboards with 2008 ThinkPad notebook computer models (R400/R500/T400/T500/W500/X200/X301)
- Appendix A. Special considerations for using the Lenovo Fingerprint Keyboard with some ThinkPad notebook models
- Appendix B. Synchronizing password in Client Security Solution after the Windows password is reset
- Appendix C. Using Client Security Solution on a reinstalled Windows operating system
- Appendix D. Using the TPM on ThinkPad notebook computers
- Appendix E. Notices
- Glossary

Chapter5.WorkingwithLenovoFingerprintSoftware
ThengerprintconsolemustberunfromtheLenovoFingerprintSoftwareinstallationfolder.Thebasic
syntaxisFPRCONSOLE[USER|SETTINGS].TheUSERorSETTINGScommandspecieswhatsetof
operationwillbeused.Thefullcommandis“fprconsoleuseraddTestUser”.Whenthecommandisnot
knownornotallparametersarespecied,theshortcommandlistisshowntogetherwiththeparameters.
TheLenovoFingerprintSoftware,installationinstructions,managementconsoleandallrelated
documentationareavailableontheLenovoWebsiteat:
http://www.lenovo.com/support
Managementconsoletool
ForinformationaboutthemanagementconsoletooloftheLenovoFingerprintSoftware,see“Management
consoletool”onpage47forreference.
LenovoFingerprintSoftwareservice
Note:TheLenovoFingerprintSoftwarerequirestheterminalserviceonthesystem.Ifyouturnoffthe
terminalservice,someunexpectedresultsmightoccurintheLenovoFingerprintSoftware.
ThefollowingservicesareaddedtothesystemaftertheLenovoFingerprintSoftwareisinstalled:
•ATService.exe(onbydefault)
YoumustturnontheATService.exeservicetousethengerprintsystem.Thisservicemanagesrequests
fromapplicationsusingthengerprintsensor.
•DataTransferService(onbydefault)
WhenDataTransferServiceortheATService.exeserviceisabnormallyterminated,LenovoFingeprint
Softwarewillnotworkasexpected.
•ADMonitor.exe(offbydefault)
YoumustturnontheADMonitor.exeservicetosupportActiveDirectoryAdministration.Thisservice
monitorstheregistryforchangespropagateddownfromActiveDirectoryandreectsthechangeslocally.
ActiveDirectorysupportforLenovoFingerprintSoftware
ThefollowingtableshowsthepolicysettingsfortheLenovoFingerprintSoftware.
Table31.Policysettings
SettingDescription
Enable/disablengerprintlogonSpeciestheuseofngerprintsinsteadofWindows
passwordstologintothecomputer.Ifyouenablethis
setting,therearetwomoreoptionsyoucanenableor
disable:
•DisableCTRL+AL T+DELdialogforlogoninterface
Ifyouselectthisoption,themessagedirectingtheuser
topressCTRL+ALT+DELtologinisturnedoff.(Only
availableinWindowsXP)
•Requirenon-administratoruserlogonwith
ngerprintauthentication
Ifyouselectthisoption,userswhoarenot
©CopyrightLenovo2008,2011
55