Manual
Table Of Contents
- Preface
- Chapter 1. Overview
- Chapter 2. Installation
- Chapter 3. Working with Client Security Solution
- Chapter 4. Working with ThinkVantage Fingerprint Software
- Chapter 5. Working with Lenovo Fingerprint Software
- Chapter 6. Best Practices
- Deployment examples for installing Client Security Solution
- Switching Client Security Solution modes
- Corporate Active Directory rollout
- Standalone Install for CD or script files
- System Update
- System Migration Assistant
- Generating a certificate using key generation in the TPM
- Using USB fingerprint keyboards with 2008 ThinkPad notebook computer models (R400/R500/T400/T500/W500/X200/X301)
- Appendix A. Special considerations for using the Lenovo Fingerprint Keyboard with some ThinkPad notebook models
- Appendix B. Synchronizing password in Client Security Solution after the Windows password is reset
- Appendix C. Using Client Security Solution on a reinstalled Windows operating system
- Appendix D. Using the TPM on ThinkPad notebook computers
- Appendix E. Notices
- Glossary
3.FromtheFilemenu,clickAdd/RemoveSnap-in,andthenclickAdd.TheAddStandalonesnap-in
windowdisplays.
4.Double-clickCerticationAuthorityinthesnap-inlist,andclickClose.
5.ClickOKintheAdd/RemoveSnap-inwindow.
6.ClickCerticateT emplatesfromtheconsoletree.Allofthecerticatetemplatesaredisplayed
intheleftpane.
7.ClickAction➙DuplicateTemplate.
8.IntheDisplayNameeld,typeTPMUser.
9.ClicktheRequestHandlingtab,andclickCSPs.BesuretoselectRequestscanuseanyCSP
availableonthesubject'scomputers.
10.ClicktheGeneraltab.MakesurethatPublishCerticateinActiveDirectoryisselected.
11.ClicktheSecuritytab,intheGrouporusernameslist,clickAuthenticatedUsersandmakesure
EnrollisselectedinthePermissionsforAuthenticatedUsersoption.
Conguringanenterprisecerticationauthority
ToissuetheTPMUsercerticatebyconguringanenterprisecerticationauthority,completethefollowing
procedure:
1.OpenCerticationAuthority.
2.Intheconsoletree,clickCerticateT emplates.
3.FromtheActionmenu,clickNew➙CerticatetoIssue.
4.ClickTPMandclickOK.
ApplyingcerticatefromtheClient
ToapplythecerticatefromtheClient,completethefollowingprocedure:
1.ConnecttotheIntranet,startInternetExplorer,andtypeintheIPaddressoftheserverwhereCA
serviceisinstalled.
2.Inputyourdomainusernameandpasswordinthepromptwindow.
3.ClickRequestacerticateunderSelectatask.
4.ClickadvancedcerticaterequestatthebottomoftheWebpage.
5.OntheAdvancedCerticateRequestpage,changethefollowingsettings:
•SelectTPMUserfromtheCerticateT emplatedrop-downlist.
•SelectThinkVantageClientSecuritySolutionCSPfromtheCSPdrop-downlist.
•MakesuretheMarkkeysasexportableisnotselected.
•ClickSubmitandfollowtheprocess.
•OntheCerticateIssuedpage,clickInstallthiscerticate.TheCerticateInstalledpageis
displayed.
UsingUSBngerprintkeyboardswith2008ThinkPadnotebookcomputer
models(R400/R500/T400/T500/W500/X200/X301)
LenovocontractswithtwovendorstoprovidengerprintauthenticationinThinkPad
®
notebookcomputer
modelsandUSBkeyboards.ThinkPadnotebookcomputermodelspriorto2008(forexample,T61)use
ThinkVantagengerprintsensors.2008ThinkPadnotebookcomputermodels(startingwithT400)use
Lenovongerprintsensors.AllLenovoUSBngerprintkeyboardsuseThinkVantagengerprintsensors.
SpecialconsiderationsarerequiredifthengerprintkeyboardisusedonsomeThinkPadnotebookmodels
(forexample,ThinkPadT400withanexternalUSBkeyboard).
Chapter6.BestPractices63