Lenovo ThinkVantage Client Security Solution 8.3 - Manual (Page 44)

Table 16. css_cert_transfer_tool.exe <cert_store_type> <filter_type>:<name | size> | all_access | usage
Parameter Description
<cert_store_type> This is the first required parameter. It must be used as the first switch
and include one of the following examples:
cert_store_user Transfers user certificates only. User certificates are
assigned to the current user.
cert_store_machine Transfers machine certificates only. Machine certificates
may be used by all authorized users on a machine.
Examples:
cert_store_all Transfers both user and machine certificate types.
<filter_type>:<name | size> This is the second required parameter. It must be used after the required
<cert_store_type> parameter. Each filter type (except as noted below)
must have a colon ‘:’ after it and must have the name of the certificate
subject, authority, or key size that is being searched for immediately
after the colon. This utility is case-sensitive and if the name you are
searching for is a compound name, such as “CA Authority”, you must
use double-quote marks “” around your search criteria (see examples).
subject_simple_name:<name> Transfers all of the certificates that match the name the
certificate is issued to, where the name of the subject is
<name>.
subject_friendly_name:<name> Transfers all of the certificates that match the friendly name
that the certificate is issued to, where the friendly name is
<name>.
issuer_simple_name:<name> Transfers all of the certificates that match the name of the
certificate authority that issued them, where the name of the
authority is <name>.
ssuer_friendly_name:<name> Transfers all of the certificates that match the friendly name
of the certificate authority that issued them, where the
friendly name of the authority is <name>.
Examples:
key_size:<size> Transfers all certificates that are encrypted with the key size
<size> in bits. Note that this is an exact match criteria; the
program will not search for certificates encrypted with a key
size of at least or at most that size.
The following two switches are standalone; they do not have a second argument to them:
all_access Transfers all certificates, do not filter.
usage Does not provide information on the command line, but the function used to determine correct usage
will return true or false if the commands passed in are correct or not.
Activating or deactivating the TPM
For ThinkPad notebook computer models X200, T400, T500 and later ThinkPad notebook computer models
(for example, T410 or T420), do the following to activate the TPM:
1. Go to the Web site at http://support.lenovo.com/en_US/detail.page?LegacyDocID=MIGR-68488.
2. Click Sample Scripts for BIOS Deployment Guide to download the script.zip file. Then extract the
zip file.
3. Type cscript.exe SetConfig.vbs SecurityChip Active in the Command Prompt window to execute the
SetConfig.vbs file.
4. Restart your computer.
Note: On ThinkPad notebook computer models T400 or T410, you should restart your computer twice to
activate the TPM.
38 Client Security Solution 8.3Deployment Guide