Manual
Table Of Contents
- Preface
- Chapter 1. Overview
- Chapter 2. Installation
- Chapter 3. Working with Client Security Solution
- Chapter 4. Working with ThinkVantage Fingerprint Software
- Chapter 5. Working with Lenovo Fingerprint Software
- Chapter 6. Best Practices
- Deployment examples for installing Client Security Solution
- Switching Client Security Solution modes
- Corporate Active Directory rollout
- Standalone Install for CD or script files
- System Update
- System Migration Assistant
- Generating a certificate using key generation in the TPM
- Using USB fingerprint keyboards with 2008 ThinkPad notebook computer models (R400/R500/T400/T500/W500/X200/X301)
- Appendix A. Special considerations for using the Lenovo Fingerprint Keyboard with some ThinkPad notebook models
- Appendix B. Synchronizing password in Client Security Solution after the Windows password is reset
- Appendix C. Using Client Security Solution on a reinstalled Windows operating system
- Appendix D. Using the TPM on ThinkPad notebook computers
- Appendix E. Notices
- Glossary
*****************************************************
**Readytotakesysprepbackup.**
****
**PLEASERUNSYSPREPNOWANDSHUTDOWN.**
****
**Nexttimethemachineboots,itwillboot**
**tothePredesktopAreaandtakeabackup.**
*****************************************************
7.RunyourSysprepimplementation.
8.Shutdownandrestartthecomputer.ItwillstartthebackupprocessinWindowsPE.
Note:Ifthemessage“Restoreinprogressbutabackupisoccurring”isdisplayed,afterthebackup,
shutdownthecomputer,donotrestart.
9.TheSysprepBaseBackupisnowcomplete.
Scenario2
Thisisanexampleinstallationonanotebookcomputerusingthesehypotheticalcustomerrequirements:
•Administration
–InstallonmachineswhereanearlierversionofClientSecuritySolutionisinstalled.
–Usethedomainadministratoraccountforadministrationofthecomputer.
–AllcomputershaveaBIOSsupervisorpassword,BIOSpw.
•ClientSecuritySolution
–UtilizetheTrustedPlatformModule.
Allmachineshavethesecuritychip.
–EnablePasswordManager.
–Usetheuser’sWindowspasswordasauthenticationtoClientSecuritySolution.
–EncrypttheClientSecuritySolutionXMLScriptwithpassword,forexample,XMLscriptPW.
ProtecttheClientSecuritySolutioncongurationlewithpassword.
•ThinkVantageFingerprintSoftware
–DonotuseBIOSandharddiskdrivepasswords.
–LogintoWindowsusingThinkVantageFingerprintSoftware.
Afteraninitialperiodofself-userenrollment,theuserwillswitchtoSecureModelogonthatrequiresa
ngerprintfornon-administratorusers,andthiswouldeffectivelyenforceadualfactorauthentication
methodology.
–IncludetheFingerprintSoftwaretutorial.
TheFingerprintSoftwaretutorialwillhelpend-userstolearnhowtoswipeangeracrossthengerprint
reader,andwillgetvisualfeedbackontheiractions.
Onthepreparationmachine:
1.Fromtheoffstate,startthecomputerandpressF1togointoBIOSSetupUtilityandnavigatetothe
Securitymenuandclearthesecuritychip.SavethesettingsandexitBIOS.
2.LogintoWindowswithadomainadministratoraccount.
3.InstalltheThinkVantageFingerprintSoftwarebydoingthefollowing:
a.Runthef001zpz2001us00.exeletoextractthesetup.exelefromtheWebpackage.Thesetup.exe
lewillbeautomaticallyextractedtothefollowinglocation:
C:\SWTOOLS\APPS\TFS5.9 .2-Buildxxxx\Application\0409(wherexxxxisthebuildID).
Chapter6.BestPractices59