Lenovo ThinkVantage (Client Security Solution 8.21) - Manual (Page 61)

Chapter 6. Best Practices
This chapter presents scenarios to illustrate the best practices of Client Security Solution and Fingerprint
Software. This scenario starts with the configuration of the hard disk drive, continues through several
updates, and follows the life cycle of a deployment. Installation on both Lenovo and non-Lenovo computers
is described.
Deployment examples for installing Client Security Solution
The following section provides examples of installing Client Security Solution on both desktops and
notebook computers.
Scenario 1
This is an example of an installation on a desktop computer using these hypothetical customer requirements:
• Administration
– Use the local administrator account for administration of the computer.
• Client Security Solution
– Install and run in Emulation Mode.
– Not all of the Lenovo systems have a Trusted Platform Module (security chip).
– Enable Client Security passphrase.
– Protect Client Security Solution applications through a passphrase.
– Enable Client Security Windows logon.
– Login to Windows with Client Security passphrase.
– Enable End-User Passphrase Recovery feature.
– Allow users to recover their passphrase by answering three user defined question and answers.
– Encrypt Client Security Solution XML Script with password = “XMLscriptPW”.
– Password protect the Client Security Solution configuration file.
– Fingerprint software may or may not be installed.
On the preparation machine:
1. Login with the Windows “local administrator” account.
2. Install the Client Security Solution program with the following options:
Client Security Solution:tvtcss82_xxxx.exe /s /v"/qn “EMULATIONMODE=1”
(where XXXX is the build ID)
“NOCSSWIZARD=1””
3. After reboot, login with the Windows local administrator account and prepare the XML script for
deployment. From the command line, run this command:
“C:\Program Files\Lenovo\Client Security Solution\css_wizarde.exe”
/name:C:\ThinkCentre
Select the following options in the wizard:
• Click Secure logon method ➙ Next.
• Type the Windows password for the administrator account and click Next. (WPW4Admin for example)
© Copyright Lenovo 2008, 2012 55