Manual
Table Of Contents
- Preface
- Chapter 1. Overview
- Chapter 2. Installation
- Chapter 3. Working with Client Security Solution
- Chapter 4. Working with ThinkVantage Fingerprint Software
- Chapter 5. Working with Lenovo Fingerprint Software
- Chapter 6. Best Practices
- Deployment examples for installing Client Security Solution
- Switching Client Security Solution modes
- Corporate Active Directory rollout
- Standalone Install for CD or script files
- System Update
- System Migration Assistant
- Generating a certificate using key generation in the TPM
- Using USB fingerprint keyboards with 2008 ThinkPad notebook computer models (R400/R500/T400/T500/W500/X200/X301)
- Appendix A. Special considerations for using the Lenovo Fingerprint Keyboard with some ThinkPad notebook models
- Appendix B. Synchronizing password in Client Security Solution after the Windows password is reset
- Appendix C. Using Client Security Solution on a reinstalled Windows operating system
- Appendix D. Using the TPM on ThinkPad notebook computers
- Appendix E. Notices
- Glossary
Chapter6.BestPractices
ThischapterpresentsscenariostoillustratethebestpracticesofClientSecuritySolutionandFingerprint
Software.Thisscenariostartswiththecongurationoftheharddiskdrive,continuesthroughseveral
updates,andfollowsthelifecycleofadeployment.InstallationonbothLenovoandnon-Lenovocomputers
isdescribed.
DeploymentexamplesforinstallingClientSecuritySolution
ThefollowingsectionprovidesexamplesofinstallingClientSecuritySolutiononbothdesktopandnotebook
computers.
Scenario1
Thisisanexampleofaninstallationonadesktopcomputerusingthesehypotheticalcustomerrequirements:
•Administration
Usethelocaladministratoraccountforadministrationofthecomputer.
•ClientSecuritySolution
–InstallandruninEmulationMode.
NotalloftheLenovosystemshaveaTrustedPlatformModule(securitychip).
–EnableClientSecuritypassphrase.
ProtectClientSecuritySolutionapplicationsthroughapassphrase.
–EnableClientSecurityWindowslogon.
LogintoWindowswithClientSecuritypassphrase.
–EnableEnd-UserPassphraseRecoveryfeature.
Enableuserstorecovertheirpassphrasebyansweringthreeuserdenedquestions.
–EncryptClientSecuritySolutionXMLScriptwithpassword,forexample,XMLscriptPW.
ProtecttheClientSecuritySolutioncongurationlewithpassword.
–FingerprintSoftwaremayormaynotbeinstalled.
Onthepreparationmachine:
1.LogintoWindowswithalocaladministratoraccount.
2.InstalltheClientSecuritySolutionprogramusingthefollowingcommand:
tvtcss83_xxxx.exe/s/v"/qn"EMULATIONMODE=1""NOCSSWIZARD=1"
(whereXXXXisthebuildID)
3.RestartthecomputerandlogintoWindowswithalocaladministratoraccount.
4.PreparetheXMLscriptfordeploymentbydoingthefollowing:
a.Runthefollowingcommand:
"C:\ProgramFiles\Lenovo\ClientSecuritySolution\css_wizarde.exe"
/name:C:\ThinkCentre
b.Congureinthewizardbydoingthefollowing:
1)ClickSecurelogonmethod➙Next.
2)TypetheWindowspassword(forexample,WPW4Admin)fortheadministratoraccountandclick
Next.
©CopyrightLenovo2008,2011
57