Lenovo ThinkVantage Client Security Solution 8.3 - Manual (Page 65)

*****************************************************
** Ready to take sysprep backup.
**
** **
** PLEASE RUN SYSPREP NOW AND SHUT DOWN. **
** **
** Next time the machine boots, it will boot **
** to the Predesktop Area and take a backup. **
*****************************************************
7. Run your Sysprep implementation.
8. Shut down and restart the computer. It will start the backup process in Windows PE.
Note: If the message “Restore in progress but a backup is occurring” is displayed, after the backup,
shut down the computer, do not restart.
9. The Sysprep Base Backup is now complete.
Scenario 2
This is an example installation on a notebook computer using these hypothetical customer requirements:
• Administration
– Install on machines where an earlier version of Client Security Solution is installed.
– Use the domain administrator account for administration of the computer.
– All computers have a BIOS supervisor password, BIOSpw.
• Client Security Solution
– Utilize the Trusted Platform Module.
All machines have the security chip.
– Enable Password Manager.
– Use the user’s Windows password as authentication to Client Security Solution.
– Encrypt the Client Security Solution XML Script with password, for example, XMLscriptPW.
Protect the Client Security Solution configuration file with password.
• ThinkVantage Fingerprint Software
– Do not use BIOS and hard disk drive passwords.
– Log in to Windows using ThinkVantage Fingerprint Software.
After an initial period of self-user enrollment, the user will switch to Secure Mode logon that requires a
fingerprint for non-administrator users, and this would effectively enforce a dual factor authentication
methodology.
– Include the Fingerprint Software tutorial.
The Fingerprint Software tutorial will help end-users to learn how to swipe a finger across the fingerprint
reader, and will get visual feedback on their actions.
On the preparation machine:
1. From the off state, start the computer and press F1 to go into BIOS Setup Utility and navigate to the
Security menu and clear the security chip. Save the settings and exit BIOS.
2. Log in to Windows with a domain administrator account.
3. Install the ThinkVantage Fingerprint Software by doing the following:
a. Run the f001zpz2001us00.exe file to extract the setup.exe file from the Web package. The setup.exe
file will be automatically extracted to the following location:
C:\SWTOOLS\APPS\TFS5.9.2-Buildxxxx\Application\0409 (where xxxx is the build ID).
Chapter 6 . Best Practices 59