
•RemoveUser:removesauserfromthelistofusersauthorizedtoaccessaHardwarePasswordManager
device.
•UpdateClientPolicy:savesanupdatedclientpolicytotheHardwarePasswordManagerBIOSofthe
device,replacingthepreviouspolicy.
•UpdateCommonHardwarePasswords:savesnewcommonhardwarepasswordstotheHardware
PasswordManagerdevice;commonhardwarepasswordsarevalidforallHardwarePasswordManager
devicesmanagedbytheHardwarePasswordManagerserver(see“Updatinghardwarepasswords
globally”onpage15
).
•UpdateEmergencyAccount:savestheemergencyaccountcredentialstotheHardwarePassword
Managerdevice;theemergencyusernameandpasswordcanbeusedtorestoretheaccesstoadeviceif
theuserisunabletologin(see“Updatingtheemergencyaccount”onpage16).
ToapplyremoteactionstoHardwarePasswordManagerdevices:
1.ClickRemoteActionsandPolicySettingsinthetoolbox(orclickTools➙ThinkVantageHardware
PasswordManager➙RemoteActionsandPolicySettings).
2.Toapplyaremoteactiontoanindividualdevice,dragthedeviceobjectfromthenetworkviewto
oneoftheseactions:RenewHardwareAccount,RestoreHardwareAccount,DeregisterPC,or
UpdateClientPolicy.
3.Toremoveauser,dragthetargetuserontotheRemoveUseractionintheRemoteActionstree.(You
canalsoremoveusersintheHPMEnrolledUserstool.)
4.ToapplyanupdatedclientpolicytoallHardwarePasswordManagerdevices,clicktheUpdateClient
PolicyGloballyonthetoolbar.SelectthepolicyitemsyouwanttochangefromtheWindowsPolicy
andBIOSPolicytabs,andthenclickOK.See“Updatingclientpoliciesglobally”onpage14
formore
information.
5.ToapplycommonpasswordstoallHardwarePasswordManagerdevices,clickUpdateCommon
Passwordsonthetoolbar.Selectthecheckboxnexttoeachtypeofpasswordthatyouwanttoapply
toallHardwarePasswordManagerdevices.Tousethesamepasswordforalldevices,typethe
passwordinthetextboxforthepasswordtypeyouselect.Ifyouleavethetextboxblank,aunique
passwordwillbegeneratedforeachdevice.
6.Tochangetheemergency(administrative)accountonallHardwarePasswordManagerdevices,click
UpdateEmergencyAccountonthetoolbar.Typeanewusernameinthetextbox.Tousethesame
passwordforalldevices,typethepasswordinthetextbox.Ifyouleavethetextboxblank,aunique
passwordwillbegeneratedforeachdevice.
Updatingclientpoliciesglobally
YoucandeterminewhichclientpoliciesareappliedtoallmanagedLenovoHardwarePasswordManager
devicesbyselectingpoliciesintheUpdateClientPolicydialogbox.Thepoliciesyoucanselectinclude
thefollowingOS-levelitems:
•HardwareaccountequalsWindowscredentials:thelogincredentialsstoredinthehardwareaccount
ofthe
HardwarePasswordManagerBIOSarethesameastheuser’sWindowscredentials.
•Auto-startregistrationatWindowslogon:whentheuserlogsintoWindowsforthersttimeafter
theHardwarePasswordManagerdeviceismanagedbytheHardwarePasswordManagerserver,the
HardwarePasswordManagerregistrationwillopenautomatically.WhentheuserlogsintoWindowsthe
rsttimeaftertheHardwarePasswordManagerdeviceismanagedbytheHardwarePasswordManager
server,theHardwarePasswordManagerregistrationwillopenautomatically.Logonsallowedbefore
forcingregistrationallowstheHPMclientportaltobeclosedthespeciednumberoftimesatlogon
time.Thissupportsvariousdeploymentscenarioswhereatechnicianneedstologontothemachinea
numberoftimespriortodeliveringtothenalenduser.
•Auto-startuserenrollmentatWindowslogon:HardwarePasswordManagerenrollmentwillopen
automaticallywhenthedeviceisregisteredandauserthathasnotbeenenrolledlogsin.
14HardwarePasswordManagerDeploymentGuide
Kommentare zu diesen Handbüchern