Lenovo ThinkVantage Client Security Solution 8.3 - Manual (Page 46)

• Disabled
• Activated
• Deactivated
• Owned
• Not owned
/setstate: <state> sets the TPM status type you prefer. 0 represents disabled and deactivated. 1 represents
enabled. 2 represents activated. 4 represents owned. You can use the adding function (that is, bitwise
OR) to set multiple valid status.
For example,
css_manage_vista_tpm.exe /verbose /setstate:0 sets the TPM status to be disabled and deactivated.
css_manage_vista_tpm.exe /verbose /setstate:1 sets the TPM status to be enabled.
css_manage_vista_tpm.exe /verbose /setstate:2 sets the TPM status to be activated.
css_manage_vista_tpm.exe /verbose /setstate:3 sets the TPM status to be enabled and activated.
Note:
• Valid TPM status types include the following:
– Enabled
– Disabled
– Activated
– Deactivated
– Enabled and activated
– Disabled and deactivated
• Valid TPM status transitions include the following:
– Disabled -> Enabled
– Disabled -> Enabled and activated
– Enabled -> Disabled
– Enabled -> Enabled and activated
– Enabled and activated -> Disabled
– Enabled and activated -> Disabled and deactivated
Active Directory Support
Active Directory is a directory service. The directory is where information about users and resources is
stored. The directory service allows access so you can manipulate those resources.
Active Directory provides a mechanism that gives administrators the ability to manage computers, groups,
users, domains, security policies, and any type of user-defined objects. The mechanism used by Active
Directory to accomplish this is known as Group Policy. With Group Policy, administrators define settings that
can be applied to computers or users in the domain.
ThinkVantage Technology products currently use a variety of methods for gathering settings used to control
program settings, including reading from specific application-defined registry entries.
40 Client Security Solution 8.3Deployment Guide