3.InstalltheThinkVantageFingerprintconsoleonthedeploymentmachinebydoingthefollowing:
a.Deploythefprconsole.exelethathasbeenextractedfromthepreparationmachinetothe
deploymentmachine,usingyourcompany'ssoftwaredistributiontool.
b.Placethefprconsole.exeletotheC:\ProgramFiles\ThinkVantageFingerprintSoftwaredirectory.
c.TurnoffBIOSpower-onsecuritysupportbyrunningthefollowingcommand:
fprconsole.exesettingsTBX0
4.InstalltheThinkVantageClientSecuritySolutiononthedeploymentmachinesbydoingthefollowing:
a.Deploythetvtvcss83_xxxx.exe(wherexxxxisthebuildID)letothedeploymentmachine,using
yourcompany'ssoftwaredistributiontool.
b.Runthefollowingcommand:
tvtvcss83_xxxx.exe/s/v"/qn"NOCSSWIZARD=1""SUPERVISORPW="BIOSpw""
TheinstallationofthesoftwarewillautomaticallyenabletheTrustedPlatformModulehardware.
5.RestartthecomputerandcongurethesystemwiththeXMLscriptlethroughthefollowingprocedure:
a.CopytheThinkPad.xml.enclepreparedearlytotheC:\directory.
b.Runthefollowingcommand:
"C:\ProgramFiles\Lenovo\ClientSecuritySolution\
vmserver.exe"C:\ThinkPad.xml.encXMLScriptPW
6.RestartthecomputerandthesystemisnowreadyforClientSecuritySolutionuserenrollment.All
userscanlogintothesystemwiththeiruserIDandWindowspassword.Eachuserwhologsinto
thesystemwillautomaticallybepromptedtoenrollintoClientSecuritySolutionandthenbeableto
enrollintothengerprintreader.
7.AfterallusersforthesystemhavebeenenrolledintheThinkVantageFingerprintSoftware,thesecure
modesettingcanbeenabledtopromptallWindowsnon-administratoruserstologinwiththeir
ngerprint.
•Toenablethesecuremodesetting,runthefollowingcommand:
"C:\ProgramFiles\ThinkVantageFingerprintSoftware\
fprconsole.exe"settingssecuremode1
•Toremovethemessage“PressCtrl+Alt+Deletetologinusingapassword”fromthelogonscreen,
runthefollowingcommand:
"C:\ProgramFiles\ThinkVantageFingerprintSoftware\fprconsole.exesettings"
CAD0
8.ThedeploymentofClientSecuritySolution8.3andThinkVantageFingerprintSoftwareisnowcomplete.
SwitchingClientSecuritySolutionmodes
IfyouswitchtheClientSecuritySolutionmodefromconvenienttosecureorifyouswitchfromsecureto
convenientmode,andyouareusingRescueandRecoverytobackupyoursystem,takeanewbasebackup
afteryouswitchmodes.
CorporateActiveDirectoryrollout
ForacorporateActiveDirectoryrollout,completethefollowingsteps:
1.InstalleitherthroughActiveDirectoryorLANDesk:
a.TakebackupsandgetreportsthroughActiveDirectoryandLANDeskofwhoandwhentheywere
taken.
b.Givecertaingroupsabilitiestotakebackups,deletebackups,scheduleoptions,andpassword
restrictions,thenchangegroupsandseeifsettingspersists.
Chapter6.BestPractices61
Kommentare zu diesen Handbüchern