Manual
Table Of Contents
- Preface
- Chapter 1. Overview
- Chapter 2. Installation
- Chapter 3. Working with Client Security Solution
- Chapter 4. Working with ThinkVantage Fingerprint Software
- Chapter 5. Working with Lenovo Fingerprint Software
- Chapter 6. Best Practices
- Deployment examples for installing Client Security Solution
- Switching Client Security Solution modes
- Corporate Active Directory rollout
- Standalone Install for CD or script files
- System Update
- System Migration Assistant
- Generating a certificate using key generation in the TPM
- Using USB fingerprint keyboards with 2008 ThinkPad notebook computer models (R400/R500/T400/T500/W500/X200/X301)
- Appendix A. Special considerations for using the Lenovo Fingerprint Keyboard with some ThinkPad notebook models
- Appendix B. Synchronizing password in Client Security Solution after the Windows password is reset
- Appendix C. Using Client Security Solution on a reinstalled Windows operating system
- Appendix D. Using the TPM on ThinkPad notebook computers
- Appendix E. Notices
- Glossary
Chapter1.Overview
ThischapterprovidesanoverviewofClientSecuritySolutionandFingerprintSoftware.Thetechnologies
presentedinthisdeploymentguidecandirectlyandindirectlyhelpITprofessionalsbecausetheyhelpmake
personalcomputerseasiertouse,moreself-sufcient,andprovidepowerfultoolsthatfacilitateandsimplify
rollouts.WiththehelpofThinkVantageTechnologies,ITprofessionalsspendlesstimesolvingindividual
computerproblemsandmoretimeontheircoretasks.
ClientSecuritySolution
TheprimarypurposeofClientSecuritySolutionsoftwareistohelpyouprotectyourcomputerasanasset,
protectcondentialdataonyourcomputer,andprotectnetworkconnectionsaccessedbyyourcomputer.
(ForLenovo-brandedsystemsthatcontainaTrustedComputingGroup(TCG)compliantTrustedPlatform
Module(TPM),ClientSecuritySolutionsoftwarewillleveragethehardwareastherootoftrustforthe
system.Ifthesystemdoesnotcontainanembeddedsecuritychip,ClientSecuritySolutionwillleverage
softwarebasedcryptographickeysastherootoftrustforthesystem.)
FeaturesofClientSecuritySolution8.3include:
•SecureuserauthenticationwithWindows
®
passwordorClientSecuritySolutionpassphrase
ClientSecuritySolutioncanbeconguredtoacceptauser'sWindowspasswordoraClientSecurity
Solutionpassphraseforauthentication.TheWindowspasswordprovidesconvenienceandmanageability
throughWindowswhiletheClientSecuritySolutionpassphraseprovidesadditionalsecurity.The
administratorcanchoosewhichauthenticationmethodisused,andthissettingcanbechangedeven
afterusersareenrolledwithClientSecuritySolution.
•Fingerprintuserauthentication
LeveragestheintegratedandUSB-attachedngerprinttechnologytoauthenticateuserstopassword
protectedapplications.
•Multi-factoruserauthenticationforWindowslogonandvariousClientSecuritySolutionoperations
Denesmultipleauthenticationdevices(Windowspassword,ClientSecuritypassphrase,andngerprint)
forvarioussecurityrelatedoperations.
•Passwordmanagement
Securelymanagesandstoressensitivelogoninformation,suchasuserIDsandpasswords.
•Passwordandpassphraserecovery
PasswordandpassphraserecoveryallowsuserstologintoWindowsandaccesstheirClientSecurity
SolutioncredentialseveniftheyforgettheirWindowspasswordorClientSecuritySolutionpassphrase,
byansweringpreconguredsecurityquestions.
•Auditsecuritysettings
Allowsuserstoviewadetailedlistofworkstationsecuritysettingsandmakechangestocomplyto
denedstandards.
•Digitalcerticatestransfer
ClientSecuritySolutionprotectstheprivatekeyofuserandmachinecerticates.UseClientSecurity
Solutiontoprotecttheprivatekeyofyourexistingcerticates.
•PolicyManagementforauthentication
Anadministratorcanchoosewhichdevices(Windowspassword,ClientSecuritySolutionpassphrase,or
ngerprint)arerequiredtoauthenticateforthefollowingactions:Windowslogon,PasswordManager,and
certicateoperations.
©CopyrightLenovo2008,2011
1