Lenovo ThinkVantage (Client Security Solution 8.21) - Manual (Page 42)

Table 16. css_cert_transfer_tool.exe <cert_store_type> <filter_type>:<name | size> | all_access | usage
Parameter Description
<cert_store_type> This is the first required parameter. It must be used as the first switch
and include one of the following examples:
cert_store_user Transfers user certificates only. User certificates are
assigned to the current user.
cert_store_machine Transfers machine certificates only. Machine certificates
may be used by all authorized users on a machine.
Examples:
cert_store_all Transfers both user and machine certificate types.
<filter_type>:<name | size> This is the second required parameter. It must be used after the required
<cert_store_type> parameter. Each filter type (except as noted below)
must have a colon ‘:’ after it and must have the name of the certificate
subject, authority, or key size that is being searched for immediately
after the colon. This utility is case-sensitive and if the name you are
searching for is a compound name, such as “CA Authority”, you must
use double-quote marks “” around your search criteria (see examples).
subject_simple_name:<name> Transfers all of the certificates that match the name the
certificate is issued to, where the name of the subject is
<name>.
subject_friendly_name:<name> Transfers all of the certificates that match the friendly name
that the certificate is issued to, where the friendly name is
<name>.
issuer_simple_name:<name> Transfers all of the certificates that match the name of the
certificate authority that issued them, where the name of the
authority is <name>.
ssuer_friendly_name:<name> Transfers all of the certificates that match the friendly name
of the certificate authority that issued them, where the
friendly name of the authority is <name>.
Examples:
key_size:<size> Transfers all certificates that are encrypted with the key size
<size> in bits. Note that this is an exact match criteria; the
program will not search for certificates encrypted with a key
size of at least or at most that size.
The following two switches are standalone; they do not have a second argument to them:
all_access Transfers all certificates, do not filter.
usage Does not provide information on the command line, but the function used to determine correct usage
will return true or false if the commands passed in are correct or not.
TPM activate tool
The tpm_activate_cmd.exe file is used to activate or deactivate the TPM on the Lenovo system.
Note: You need administrator privileges to run this command.
Table 17. Parameters for activating or deactivating the TPM on the Lenovo system
Parameter Description
/help or /? Displays the list of parameters.
/biospw:password Specifies the BIOS supervisor or administrator password
if one is set.
36 Client Security Solution 8.21Deployment Guide