Authentication policies, Password manager – Lenovo ThinkVantage Client Security Solution 8.3 User Manual

Page 49

Advertising
background image

Table 20. Computer Configuration Administrative templates ThinkVantage Client Security Solution
Authentication policies Default mode (continued)

Policy

Enabled settings

Description

Fingerprint

You can set the frequency to either Every time, or
Once per logon.

Controls whether fingerprint is required.

Override

Set to override the password, passphrase, or
fingerprint.

Defines “fallback” authentication
requirements if normal authentication
fails.

Authentication Policies

The following list of policies contain enabled settings that define the authentication level of each policy:

• Windows logon authentication level

• System unlock authentication level

• Password manager authentication level

• CSP signature authentication level

• CSP decryption authentication level

• PKCS#11 signature authentication level

• PKCS#11 decryption authentication level

• PKCS#11 logon authentication level

The following table provides values and settings for the preceding authentication levels:

Table 21. Computer Configuration Administrative templates ThinkVantage Client Security Solution
Authentication policies

Policy

Enabled settings

Description

Password

Set the frequency to either Every time, or Once
per logon
.

Controls whether password is required.

Passphrase

Set the frequency to either Every time, or Once
per logon
.

Controls whether passphrase is
required.

Fingerprint

Set the frequency to either Every time, or Once
per logon
.

Controls whether fingerprint is required.

Override

Set to override the password, passphrase, or
fingerprint.

Defines “fallback” authentication
requirements if normal authentication
fails.

Password manager

The following table provides policy settings for Password manager.

Table 22. Computer Configuration ThinkVantage Client Security Solution Password manager

Policy setting

Description

Disable Password manager

Controls whether Password manager will start when the system starts.

Disable Internet Explorer support

Controls whether Password manager will be able to store passwords from
Internet Explorer.

Disable Mozilla support

Controls whether Password manager will be able to store passwords from
Mozilla-based browsers, including Firefox and Netscape.

Disable support for Windows
applications

Controls whether Password manager will be able to store passwords from
Windows applications.

Chapter 3

.

Working with Client Security Solution

43

Advertising