Chapter6.BestPractices
ThischapterpresentsscenariostoillustratethebestpracticesofClientSecuritySolutionandFingerprint
Software.Thisscenariostartswiththecongurationoftheharddiskdrive,continuesthroughseveral
updates,andfollowsthelifecycleofadeployment.InstallationonbothLenovoandnon-Lenovocomputers
isdescribed.
DeploymentexamplesforinstallingClientSecuritySolution
ThefollowingsectionprovidesexamplesofinstallingClientSecuritySolutiononbothdesktopandnotebook
computers.
Scenario1
Thisisanexampleofaninstallationonadesktopcomputerusingthesehypotheticalcustomerrequirements:
•Administration
Usethelocaladministratoraccountforadministrationofthecomputer.
•ClientSecuritySolution
–InstallandruninEmulationMode.
NotalloftheLenovosystemshaveaTrustedPlatformModule(securitychip).
–EnableClientSecuritypassphrase.
ProtectClientSecuritySolutionapplicationsthroughapassphrase.
–EnableClientSecurityWindowslogon.
LogintoWindowswithClientSecuritypassphrase.
–EnableEnd-UserPassphraseRecoveryfeature.
Enableuserstorecovertheirpassphrasebyansweringthreeuserdenedquestions.
–EncryptClientSecuritySolutionXMLScriptwithpassword,forexample,XMLscriptPW.
ProtecttheClientSecuritySolutioncongurationlewithpassword.
–FingerprintSoftwaremayormaynotbeinstalled.
Onthepreparationmachine:
1.LogintoWindowswithalocaladministratoraccount.
2.InstalltheClientSecuritySolutionprogramusingthefollowingcommand:
tvtcss83_xxxx.exe/s/v"/qn"EMULATIONMODE=1""NOCSSWIZARD=1"
(whereXXXXisthebuildID)
3.RestartthecomputerandlogintoWindowswithalocaladministratoraccount.
4.PreparetheXMLscriptfordeploymentbydoingthefollowing:
a.Runthefollowingcommand:
"C:\ProgramFiles\Lenovo\ClientSecuritySolution\css_wizarde.exe"
/name:C:\ThinkCentre
b.Congureinthewizardbydoingthefollowing:
1)ClickSecurelogonmethod➙Next.
2)TypetheWindowspassword(forexample,WPW4Admin)fortheadministratoraccountandclick
Next.
©CopyrightLenovo2008,2011
57
Kommentare zu diesen Handbüchern