Troubleshooting, Credential manager for protecttools, 7 troubleshooting – HP Compaq dc5750 Microtower-PC User Manual

Page 62: 7troubleshooting

Advertising
background image

7

Troubleshooting

Credential Manager for ProtectTools

Short description

Details

Solution

Using Credential Manager
Network Accounts option,
a user can select which
domain account to log
into. When TPM
authentication is used, this
option is not available. All
other authentication
methods work properly.

Using TPM authentication, the user is
only logged into the local computer.

Using Credential Manager Single Sign On tools allows
user to authenticate other accounts.

USB token credential is
not available with login to
Windows XP Service Pack
1.

After installing USB token software,
registering the USB token credential, and
setting Credential Manager as primary
login, the USB Token is neither listed nor
available in the Credential Manager/gina
logon.

When logging back into Windows, log off
Credential Manager, re-log back into
Credential Manager and reselect token
as primary login, the token login
operation functions normally.

This only occurs with Windows XP Service Pack 1;
update Windows version to Service Pack 2 via
Windows Update to correct.

To work around if retaining Service Pack 1, re-log back
into Windows using another credential (Windows
password) in order to log off and re-log back into
Credential Manager.

Some application Web
pages create errors that
prevent user from
performing or completing
tasks.

Some Web-based applications stop
functioning and report errors due to the
disabling functionality pattern of Single
Sign On. For example, an ! in a yellow
triangle is observed in Internet Explorer
indicating an error has occurred.

Credential Manager Single Sign On does not support
all software Web interfaces. Disable Single Sign On
support for the specific Web page by turning off Single
Sign On support. Please see complete documentation
on Single Sign On, which is available in the Credential
Manager help files.

If a specific Single Sign On cannot be disabled for a
given application, call HP Service and Support and
request 3rd level support through your HP Service
contact.

No option to Browse for
Virtual Token
during the
login process.

User cannot move the location of
registered virtual token in Credential
Manager because the option to browse
was removed due to security risks.

The browse option was removed from current product
offerings because it allowed non-users to delete and
rename files and take control of Windows.

Login with TPM
authentication does not
give the Network
Accounts
option.

Using the Network Accounts option, a
user can select which domain account to
log into. When TPM authentication is
used, this option is not available.

HP is researching a workaround for future product
enhancements.

Domain administrators
cannot change Windows
password even with
authorization.

This happens after a domain
administrator logs on to a domain and
registers the domain identity with
Credential Manager using an account
with Administrator's rights on the domain
and the local PC. When the domain
administrator attempts to change the

Credential Manager cannot change a domain user's
account password through Change Windows
password
. Credential Manager can only change the
local PC account passwords. The domain user can
change his/her password through Windows
security
> Change password option, but, since the
domain user does not have a physical account on the

56

Chapter 7 Troubleshooting

ENWW

Advertising