Manual
Table Of Contents
- Preface
- Chapter 1. Overview
- Chapter 2. Installation
- Chapter 3. Working with Client Security Solution
- Chapter 4. Working with ThinkVantage Fingerprint Software
- Chapter 5. Working with Lenovo Fingerprint Software
- Chapter 6. Best Practices
- Deployment examples for installing Client Security Solution
- Switching Client Security Solution modes
- Corporate Active Directory rollout
- Standalone Install for CD or script files
- System Update
- System Migration Assistant
- Generating a certificate using key generation in the TPM
- Using USB fingerprint keyboards with 2008 ThinkPad notebook computer models (R400/R500/T400/T500/W500/X200/X301)
- Appendix A. Special considerations for using the Lenovo Fingerprint Keyboard with some ThinkPad notebook models
- Appendix B. Synchronizing password in Client Security Solution after the Windows password is reset
- Appendix C. Using Client Security Solution on a reinstalled Windows operating system
- Appendix D. Using the TPM on ThinkPad notebook computers
- Appendix E. Notices
- Glossary
3.InstalltheThinkVantageFingerprintconsoleonthedeploymentmachinebydoingthefollowing:
a.Deploythefprconsole.exelethathasbeenextractedfromthepreparationmachinetothe
deploymentmachine,usingyourcompany'ssoftwaredistributiontool.
b.Placethefprconsole.exeletotheC:\ProgramFiles\ThinkVantageFingerprintSoftwaredirectory.
c.TurnoffBIOSpower-onsecuritysupportbyrunningthefollowingcommand:
fprconsole.exesettingsTBX0
4.InstalltheThinkVantageClientSecuritySolutiononthedeploymentmachinesbydoingthefollowing:
a.Deploythetvtvcss83_xxxx.exe(wherexxxxisthebuildID)letothedeploymentmachine,using
yourcompany'ssoftwaredistributiontool.
b.Runthefollowingcommand:
tvtvcss83_xxxx.exe/s/v"/qn"NOCSSWIZARD=1""SUPERVISORPW="BIOSpw""
TheinstallationofthesoftwarewillautomaticallyenabletheTrustedPlatformModulehardware.
5.RestartthecomputerandcongurethesystemwiththeXMLscriptlethroughthefollowingprocedure:
a.CopytheThinkPad.xml.enclepreparedearlytotheC:\directory.
b.Runthefollowingcommand:
"C:\ProgramFiles\Lenovo\ClientSecuritySolution\
vmserver.exe"C:\ThinkPad.xml.encXMLScriptPW
6.RestartthecomputerandthesystemisnowreadyforClientSecuritySolutionuserenrollment.All
userscanlogintothesystemwiththeiruserIDandWindowspassword.Eachuserwhologsinto
thesystemwillautomaticallybepromptedtoenrollintoClientSecuritySolutionandthenbeableto
enrollintothengerprintreader.
7.AfterallusersforthesystemhavebeenenrolledintheThinkVantageFingerprintSoftware,thesecure
modesettingcanbeenabledtopromptallWindowsnon-administratoruserstologinwiththeir
ngerprint.
•Toenablethesecuremodesetting,runthefollowingcommand:
"C:\ProgramFiles\ThinkVantageFingerprintSoftware\
fprconsole.exe"settingssecuremode1
•Toremovethemessage“PressCtrl+Alt+Deletetologinusingapassword”fromthelogonscreen,
runthefollowingcommand:
"C:\ProgramFiles\ThinkVantageFingerprintSoftware\fprconsole.exesettings"
CAD0
8.ThedeploymentofClientSecuritySolution8.3andThinkVantageFingerprintSoftwareisnowcomplete.
SwitchingClientSecuritySolutionmodes
IfyouswitchtheClientSecuritySolutionmodefromconvenienttosecureorifyouswitchfromsecureto
convenientmode,andyouareusingRescueandRecoverytobackupyoursystem,takeanewbasebackup
afteryouswitchmodes.
CorporateActiveDirectoryrollout
ForacorporateActiveDirectoryrollout,completethefollowingsteps:
1.InstalleitherthroughActiveDirectoryorLANDesk:
a.TakebackupsandgetreportsthroughActiveDirectoryandLANDeskofwhoandwhentheywere
taken.
b.Givecertaingroupsabilitiestotakebackups,deletebackups,scheduleoptions,andpassword
restrictions,thenchangegroupsandseeifsettingspersists.
Chapter6.BestPractices61