Configurable settings – Lenovo ThinkVantage Client Security Solution 8.3 User Manual

Page 57

Advertising
background image

Table 30. Options for limited users in the convenient mode (continued)

Settings

Description

Security mode

Limited users cannot modify security modes.

Pro Servers

Limited users can access - only relevant with server.

Configurable settings

Some fingerprint software options can be configured through registry settings.

Preboot/power-on software interface: The mechanism for enabling fingerprint preboot or power-on

support and storing fingerprints on the companion chip is not normally displayed in the fingerprint
software unless there are BIOS or hard drive passwords set on the system. In order to override this
behavior and force these options to be shown without the existence of BIOS or hard drive passwords,
add one of the following, that apply to your computer machine type, to the registry:

[HKEY_LOCAL_MACHINE\SOFTWARE\Protector Suite QL\1.0]

REG_DWORD "BiosFeatures" = 2

or,

[HKEY_LOCAL_MACHINE\SOFTWARE\Protector Suite QL\1.0]

REG_DWORD "BiosFeatures" = 4

This setting is useful when SafeGuard Easy is installed on a system without BIOS passwords and is
utilizing fingerprint authentication to decrypt the hard drive.

Sounds: The fingerprint software can be configured to play a sound contained in a .wav file under various

circumstance during the fingerprint authentication process. The registry settings for these sounds are
as follows:

[HKEY_LOCAL_MACHINE\SOFTWARE\Protector Suite QL\1.0\settings]
‘Success’
REG_SZ “sndSuccess” = [path to sound file]
The file designated will play whenever a successful swipe is registered.

‘Failure’
REG_SZ “sndFailure” = [path to sound file]
The file designated will play whenever an unsuccessful swipe is attempted.

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\fingerprint

‘Scan’
REG_SZ “sndScan” = [path to sound file]
The file designated will play whenever the fingerprint verification

dialog is displayed for Client Security Solution-related operations.

If the value is not present or is empty then no sound is played.

Quality’
REG_SZ “sndQuality” = [path to sound file]
The file designated will play whenever an unreadable swipe has occurred.
If the value is not present or is empty then no sound is played.

Password validation during system unlock: By default, the fingerprint software validates stored

password during system unlock. The validation requires contacting the domain controller and might
cause delay. To avoid the delay, disable the password validation during system unlock and by editing
the registry as follows:

[HKEY_LOCAL_MACHINE\SOFTWARE\Protector Suite QL\1.0\settings]
REG_DWORD "DoNotTestUnlock"=1

Chapter 4

.

Working with ThinkVantage Fingerprint Software

51

Advertising