Chapter6.BestPractices
ThischapterpresentsscenariostoillustratethebestpracticesofClientSecuritySolutionandFingerprint
Software.Thisscenariostartswiththecongurationoftheharddiskdrive,continuesthroughseveral
updates,andfollowsthelifecycleofadeployment.InstallationonbothLenovoandnon-Lenovocomputers
isdescribed.
DeploymentexamplesforinstallingClientSecuritySolution
ThefollowingsectionprovidesexamplesofinstallingClientSecuritySolutiononbothdesktopsand
notebookcomputers.
Scenario1
Thisisanexampleofaninstallationonadesktopcomputerusingthesehypotheticalcustomerrequirements:
•Administration
–Usethelocaladministratoraccountforadministrationofthecomputer.
•ClientSecuritySolution
–InstallandruninEmulationMode.
–NotalloftheLenovosystemshaveaTrustedPlatformModule(securitychip).
–EnableClientSecuritypassphrase.
–ProtectClientSecuritySolutionapplicationsthroughapassphrase.
–EnableClientSecurityWindowslogon.
–LogintoWindowswithClientSecuritypassphrase.
–EnableEnd-UserPassphraseRecoveryfeature.
–Allowuserstorecovertheirpassphrasebyansweringthreeuserdenedquestionandanswers.
–EncryptClientSecuritySolutionXMLScriptwithpassword=“XMLscriptPW”.
–PasswordprotecttheClientSecuritySolutioncongurationle.
–Fingerprintsoftwaremayormaynotbeinstalled.
Onthepreparationmachine:
1.LoginwiththeWindows“localadministrator”account.
2.InstalltheClientSecuritySolutionprogramwiththefollowingoptions:
ClientSecuritySolution:tvtcss82_xxxx.exe/s/v"/qn“EMULATIONMODE=1”
(whereXXXXisthebuildID)
“NOCSSWIZARD=1””
3.Afterreboot,loginwiththeWindowslocaladministratoraccountandpreparetheXMLscriptfor
deployment.Fromthecommandline,runthiscommand:
“C:\ProgramFiles\Lenovo\ClientSecuritySolution\css_wizarde.exe”
/name:C:\ThinkCentre
Selectthefollowingoptionsinthewizard:
•ClickSecurelogonmethod➙Next.
•TypetheWindowspasswordfortheadministratoraccountandclickNext.(WPW4Adminforexample)
©CopyrightLenovo2008,2012
55
Kommentare zu diesen Handbüchern