Lenovo ThinkVantage Client Security Solution 8.3 - Manual (Page 63)

Chapter 6. Best Practices
This chapter presents scenarios to illustrate the best practices of Client Security Solution and Fingerprint
Software. This scenario starts with the configuration of the hard disk drive, continues through several
updates, and follows the life cycle of a deployment. Installation on both Lenovo and non-Lenovo computers
is described.
Deployment examples for installing Client Security Solution
The following section provides examples of installing Client Security Solution on both desktop and notebook
computers.
Scenario 1
This is an example of an installation on a desktop computer using these hypothetical customer requirements:
• Administration
Use the local administrator account for administration of the computer.
• Client Security Solution
– Install and run in Emulation Mode.
Not all of the Lenovo systems have a Trusted Platform Module (security chip).
– Enable Client Security passphrase.
Protect Client Security Solution applications through a passphrase.
– Enable Client Security Windows logon.
Log in to Windows with Client Security passphrase.
– Enable End-User Passphrase Recovery feature.
Enable users to recover their passphrase by answering three user defined questions.
– Encrypt Client Security Solution XML Script with password, for example, XMLscriptPW.
Protect the Client Security Solution configuration file with password.
– Fingerprint Software may or may not be installed.
On the preparation machine:
1. Log in to Windows with a local administrator account.
2. Install the Client Security Solution program using the following command:
tvtcss83_xxxx.exe /s /v"/qn "EMULATIONMODE=1" "NOCSSWIZARD=1"
(where XXXX is the build ID)
3. Restart the computer and log in to Windows with a local administrator account.
4. Prepare the XML script for deployment by doing the following:
a. Run the following command:
"C:\Program Files\Lenovo\Client Security Solution\css_wizarde.exe"
/name:C:\ThinkCentre
b. Configure in the wizard by doing the following:
1) Click Secure logon method ➙ Next.
2) Type the Windows password (for example, WPW4Admin) for the administrator account and click
Next.
© Copyright Lenovo 2008, 2011 57