Lenovo THINKPAD Z60M User Manual
Page 106
v
Administration
–
Install
on
machines
where
previous
versions
of
Rescue
and
Recovery
and
Client
Security
Solution
are
installed.
–
Use
the
domain
administrator
account
for
administration
of
the
computer.
–
All
computers
have
a
BIOS
supervisor
password,
BIOSpw.
v
Client
Security
Solution
–
Utilize
the
Trusted
Platform
Module.
-
All
machines
have
the
security
chip.
–
Enable
Password
Manager.
–
Using
the
user’s
Windows
password
as
authentication
to
Client
Security
Solution.
-
Allows
for
single
Windows
password
for
authentication
to
Utimaco
SafeGuard
Easy,
Client
Security
Solution,
and
Windows
Domain.
–
Encrypt
the
Client
Security
Solution
XML
Script
with
password
=
″XMLscriptPW″.
-
The
password
protects
the
Client
Security
Solution
configuration
file.
v
ThinkVantage
Fingerprint
Software
–
Do
not
want
to
use
BIOS
and
hard
drive
passwords.
–
Logon
with
Fingerprint
software.
-
After
an
initial
period
for
self-user
enrollment,
the
user
will
switch
to
Secure
Mode
logon
requiring
a
fingerprint
for
non-administrator
users,
thus
effectively
enforcing
a
dual
factor
authentication
methodology.
–
Include
the
Fingerprint
tutorial.
-
The
end-users
can
learn
how
to
properly
swipe
their
finger
and
get
visual
feedback
on
what
they
may
be
doing
wrong.
On
the
preparation
machine:
1.
From
the
off
state,
start
the
computer
and
press
F1
to
go
into
BIOS
and
navigate
to
the
security
menu
and
clear
the
security
chip.
Save
and
exit
the
BIOS.
2.
Login
with
the
Windows
domain
administrator
account.
3.
Install
the
ThinkVantage
Fingerprint
software
running
the
56-32.exe
to
extract
the
setup.exe
file
from
the
Web
package.
This
will
automatically
extract
at
the
following
location:
C:\SWTOOLS\APPS.
4.
Start
the
setup.exe
at
the
following
location:
C:\SWTOOLS\APPS\tfs56
to
install
the
ThinkVantage
Fingerprint
Software.
5.
Install
the
Client
Security
Solution
program
with
the
following
options:
z500zisxxxxus00.exe
/s
/v”/qn
NOCSSWIZARD=1
SUPERVISORPW=
(Where
XXXX
is
the
build
ID
and
cc
is
the
country
code.)
”BIOSpw”"
6.
After
rebooting,
login
with
the
Windows
domain
administrator
account
and
prepare
the
XML
script
for
deployment.
From
the
command
line
run:
“C:\Program
Files\Lenovo\Client
Security
Solution\css_wizard.exe”
/name:C:\ThinkPad
Select
the
following
options
in
the
wizard
to
match
the
example
script:
v
Click
secure
logon
method
->
click
Next
.
v
Type
the
Windows
password
for
the
Domain
administrator
account
->
click
Next
(WPW4Admin
for
example).
100
Rescue
and
Recovery
Deployment
Guide
Version
4.1