Custom public properties, Trusted platform module support – Lenovo ThinkVantage (Client Security Solution 8.21) User Manual

Page 12

Advertising
background image

Custom public properties

The installation package for the Client Security Software program contains a set of custom public properties
that can be set on the command line when running the installation. The following table provides the custom
public properties for Windows XP and Windows 2000:

Table 1. Public properties

Property

Description

EMULATIONMODE

Specify to force the installation in Emulation mode even if
a TPM exists. Set EMULATIONMODE=1 on the command
line to install in Emulation mode.

HALTIFTPMDISABLED

If the TPM is in a disabled state and the installation
is running in silent mode, the default is for the
installation to proceed in emulation mode. Use the
HALTIFTPMDISABLED=1 property when running the
installation in silent mode to halt the installation if the
TPM is disabled.

NOCSSWIZARD

Set NOCSSWIZARD=1 on the command line to prevent
the Client Security Solution enrollment dialog from being
displayed automatically after installing Client Security
Solution. This property is configured for an administrator
who wants to install Client Security Solution, but use
scripting later when configuring the system.

CSS_CONFIG_SCRIPT

Set CSS_CONFIG_SCRIPT=“filename” or “filename
password” to have a configuration file run after the user
completes the install and reboots.

SUPERVISORPW

Set SUPERVISORPW=“password” on the command line
to supply the supervisor password to enable the chip in
silent or non-silent install mode. If the chip is disabled
and the installation is running in silent mode, the correct
supervisor password must be supplied to enable the chip,
otherwise the chip is not enabled.

PWMGRMODE

Set PWMGRMODE=1 on the command line to install
Password Manager only.

NOSTARTMENU

Set NOSTARTMENU=1 on the command line to prevent
generating shortcut in the start menu.

Trusted Platform Module support

Client Security Solution Version 8.2 includes support for the computer's embedded security hardware --
the Trusted Platform Module (TPM). For Windows 2000 and XP, you may need to download drivers for your
system's TPM. If you are running Windows Vista, and your computer includes a TPM supported by the
operating system, Client Security Solution will use the drivers supplied by the operating system.

Enabling of the TPM may require a reboot, as the TPM is enabled by the system's BIOS. If running Windows
Vista, you may be asked to confirm the enablement of the TPM during system startup.

Before any functions can be carried out by the Trusted Platform Module, ownership must first be initialized.
Each system will have one Client Security Solution administrator that will control the Client Security Solution
options. This administrator must have Windows administrator privileges. The administrator can be initialized
using XML deployment scripts.

6

Client Security Solution 8.21Deployment Guide

Advertising