Lenovo ThinkVantage Client Security Solution 8.3 - Manual (Page 67)

3. Install the ThinkVantage Fingerprint console on the deployment machine by doing the following:
a. Deploy the fprconsole.exe file that has been extracted from the preparation machine to the
deployment machine, using your company's software distribution tool.
b. Place the fprconsole.exe file to the C:\Program Files\ThinkVantage Fingerprint Software directory.
c. Turn off BIOS power-on security support by running the following command:
fprconsole.exe settings TBX 0
4. Install the ThinkVantage Client Security Solution on the deployment machines by doing the following:
a. Deploy the tvtvcss83_xxxx.exe (where xxxx is the build ID) file to the deployment machine, using
your company's software distribution tool.
b. Run the following command:
tvtvcss83_xxxx.exe /s /v"/qn "NOCSSWIZARD=1" "SUPERVISORPW="BIOSpw""
The installation of the software will automatically enable the Trusted Platform Module hardware.
5. Restart the computer and configure the system with the XML script file through the following procedure:
a. Copy the ThinkPad.xml.enc file prepared early to the C:\ directory.
b. Run the following command:
"C:\Program Files\Lenovo\Client Security Solution\
vmserver.exe" C:\ThinkPad.xml.enc XMLScriptPW
6. Restart the computer and the system is now ready for Client Security Solution user enrollment. All
users can log in to the system with their user ID and Windows password. Each user who logs in to
the system will automatically be prompted to enroll into Client Security Solution and then be able to
enroll into the fingerprint reader.
7. After all users for the system have been enrolled in the ThinkVantage Fingerprint Software, the secure
mode setting can be enabled to prompt all Windows non-administrator users to log in with their
fingerprint.
• To enable the secure mode setting, run the following command:
"C:\Program Files\ThinkVantage Fingerprint Software\
fprconsole.exe" settings securemode 1
• To remove the message “Press Ctrl+Alt+Delete to log in using a password” from the logon screen,
run the following command:
"C:\Program Files\ThinkVantage Fingerprint Software\fprconsole.exe settings"
CAD 0
8. The deployment of Client Security Solution 8.3 and ThinkVantage Fingerprint Software is now complete.
Switching Client Security Solution modes
If you switch the Client Security Solution mode from convenient to secure or if you switch from secure to
convenient mode, and you are using Rescue and Recovery to backup your system, take a new base backup
after you switch modes.
Corporate Active Directory rollout
For a corporate Active Directory rollout, complete the following steps:
1. Install either through Active Directory or LANDesk:
a. Take backups and get reports through Active Directory and LANDesk of who and when they were
taken.
b. Give certain groups abilities to take backups, delete backups, schedule options, and password
restrictions, then change groups and see if settings persists.
Chapter 6 . Best Practices 61