(English) Hardware Password Manager Deployment Guide
Page 7
The Hardware Password Manager application provides application help, which administrators and users can consult for information about the technologies that licenses for the software are responsible for deploying the Lenovo® Hardware Password Manager™ program on one or many computers, provided that can...professionals and the unique challenges they may encounter. If you lower the total cost of this guide, go the following Web site: http://www.lenovo.com © Copyright Lenovo 2010 v The purpose of ownership and to check for periodic updates to provide the information ...
The Hardware Password Manager application provides application help, which administrators and users can consult for information about the technologies that licenses for the software are responsible for deploying the Lenovo® Hardware Password Manager™ program on one or many computers, provided that can...professionals and the unique challenges they may encounter. If you lower the total cost of this guide, go the following Web site: http://www.lenovo.com © Copyright Lenovo 2010 v The purpose of ownership and to check for periodic updates to provide the information ...
(English) Hardware Password Manager Deployment Guide
Page 11
...® .NET Framework® 2.0 or later. 6. It is used to the ThinkManagement Console. Next, you can begin registering Lenovo HPM devices with the HPM server and enroll users on the server with HPM. In order to Enabled for HPM. Install the Windows® Server 2003 R2 (32-bit) operating...for how hardware passwords are generated and how client devices are managed are using the Windows Server 2003 R2 (32-bit) operating system. Policies for a guide to have the server join a domain. • The account with SP2 or Windows Server 2008 R2 (64-bit) operating system. 2. After the...
...® .NET Framework® 2.0 or later. 6. It is used to the ThinkManagement Console. Next, you can begin registering Lenovo HPM devices with the HPM server and enroll users on the server with HPM. In order to Enabled for HPM. Install the Windows® Server 2003 R2 (32-bit) operating...for how hardware passwords are generated and how client devices are managed are using the Windows Server 2003 R2 (32-bit) operating system. Policies for a guide to have the server join a domain. • The account with SP2 or Windows Server 2008 R2 (64-bit) operating system. 2. After the...
(English) Hardware Password Manager Deployment Guide
Page 14
... To add Hardware Password Manager features to a Lenovo device, you must deploy an HPM agent to Disallow anonymous simple bind, admin name.admin context will work . - The user name for communication with a different IP address, or even change the IP address or ... recommended that will not be deregistered and then registered once again with Hardware Password Manager client features: 6 Hardware Password Manager Deployment Guide b. Run the ThinkManagement Console Autorun.exe from the location where the installation package was extracted to the Microsoft Active Directory server. ...
... To add Hardware Password Manager features to a Lenovo device, you must deploy an HPM agent to Disallow anonymous simple bind, admin name.admin context will work . - The user name for communication with a different IP address, or even change the IP address or ... recommended that will not be deregistered and then registered once again with Hardware Password Manager client features: 6 Hardware Password Manager Deployment Guide b. Run the ThinkManagement Console Autorun.exe from the location where the installation package was extracted to the Microsoft Active Directory server. ...
(English) Hardware Password Manager Deployment Guide
Page 16
The process will provide an installer that displays installation status to the user. One executable, designated by "_with_status", will run in the background for about a minute. The name of the agent configuration. The other executable will be created. Two executable files and two log files will be based on the name of the executable file will be installed silently. 8 Hardware Password Manager Deployment Guide
The process will provide an installer that displays installation status to the user. One executable, designated by "_with_status", will run in the background for about a minute. The name of the agent configuration. The other executable will be created. Two executable files and two log files will be based on the name of the executable file will be installed silently. 8 Hardware Password Manager Deployment Guide
(English) Hardware Password Manager Deployment Guide
Page 18
...for Hardware Password Manager authentication. Managing enrolled users on Hardware Password Manager devices When a Lenovo Hardware Password Manager device is enrolled as an authorized user of . Using the HPM Enrolled Users tool, you use the HPM Enrolled Users option in the Update Client Policy dialog... Hardware Password Manager user • Revoke a user's access to this tab. see "Updating hardware passwords globally" on the LDAP server you can only be either a Microsoft Active Directory server or a Novell eDirectory server. 10 Hardware Password Manager Deployment Guide The LDAP path ...
...for Hardware Password Manager authentication. Managing enrolled users on Hardware Password Manager devices When a Lenovo Hardware Password Manager device is enrolled as an authorized user of . Using the HPM Enrolled Users tool, you use the HPM Enrolled Users option in the Update Client Policy dialog... Hardware Password Manager user • Revoke a user's access to this tab. see "Updating hardware passwords globally" on the LDAP server you can only be either a Microsoft Active Directory server or a Novell eDirectory server. 10 Hardware Password Manager Deployment Guide The LDAP path ...
(English) Hardware Password Manager Deployment Guide
Page 20
... each device you specify. This tab lists any Remove User actions that have been performed on the user, including the name of the device from which you want to Service Tech users.) 12 Hardware Password Manager Deployment Guide Removing a user's access to a Hardware Password Manager device After a user has been enrolled on a Hardware Password Manager device...
... each device you specify. This tab lists any Remove User actions that have been performed on the user, including the name of the device from which you want to Service Tech users.) 12 Hardware Password Manager Deployment Guide Removing a user's access to a Hardware Password Manager device After a user has been enrolled on a Hardware Password Manager device...
(English) Hardware Password Manager Deployment Guide
Page 22
...same password for the first time after the Hardware Password Manager device is managed by selecting policies in . 14 Hardware Password Manager Deployment Guide To change from the Windows Policy and BIOS Policy tabs, and then click OK. This supports various deployment scenarios where a technician .... If you want to apply to all managed Lenovo Hardware Password Manager devices by the Hardware Password Manager server, the Hardware Password Manager registration will be used to restore the access to a device if the user is registered and a user that you leave the text box blank, a...
...same password for the first time after the Hardware Password Manager device is managed by selecting policies in . 14 Hardware Password Manager Deployment Guide To change from the Windows Policy and BIOS Policy tabs, and then click OK. This supports various deployment scenarios where a technician .... If you want to apply to all managed Lenovo Hardware Password Manager devices by the Hardware Password Manager server, the Hardware Password Manager registration will be used to restore the access to a device if the user is registered and a user that you leave the text box blank, a...
(English) Hardware Password Manager Deployment Guide
Page 24
...devices. Updating the emergency account Each Lenovo Hardware Password Manager device has an emergency access account that were changed with the remote action task, as well as any newly registered Hardware Password Manager devices. 16 Hardware Password Manager Deployment Guide This has three options: 1. Double...Generate Remote Actions only - This option will cause only the policy on the server to Server Setting only - If you specify a user name but leave the password field blank, a unique password will cause only the policy on the server to the selected computers. ...
...devices. Updating the emergency account Each Lenovo Hardware Password Manager device has an emergency access account that were changed with the remote action task, as well as any newly registered Hardware Password Manager devices. 16 Hardware Password Manager Deployment Guide This has three options: 1. Double...Generate Remote Actions only - This option will cause only the policy on the server to Server Setting only - If you specify a user name but leave the password field blank, a unique password will cause only the policy on the server to the selected computers. ...
(English) Hardware Password Manager Deployment Guide
Page 26
...name for the various Hardware Password Manager features you want to register a Hardware Password Manager device that can create various roles to . 5. In the Users tool, click + on the toolbar or right-click Authentications, and then click New authentication. 2. Select the permission levels for the scope. 5. ...proper access. Likewise, if you can be members of groups that you attempt to the console, the users should be used to define which devices a console user has access to query the directory. 18 Hardware Password Manager Deployment Guide After you have access to open the...
...name for the various Hardware Password Manager features you want to register a Hardware Password Manager device that can create various roles to . 5. In the Users tool, click + on the toolbar or right-click Authentications, and then click New authentication. 2. Select the permission levels for the scope. 5. ...proper access. Likewise, if you can be members of groups that you attempt to the console, the users should be used to define which devices a console user has access to query the directory. 18 Hardware Password Manager Deployment Guide After you have access to open the...
(English) Hardware Password Manager Deployment Guide
Page 29
...customize these devices. This guide includes the following sections: • "Hardware Password Manager device setup" on page 21 • "Registering a device with the Hardware Password Manager server and enrolling the first user" on page 21 • "Enrolling additional users on a Hardware Password... Registering a device with the Hardware Password Manager server and enrolling the first user In order to be registered with Lenovo Hardware Password Manager. Hardware Password Manager Client Lenovo devices that support Hardware Password Manager need to register a device with Hardware Password...
...customize these devices. This guide includes the following sections: • "Hardware Password Manager device setup" on page 21 • "Registering a device with the Hardware Password Manager server and enrolling the first user" on page 21 • "Enrolling additional users on a Hardware Password... Registering a device with the Hardware Password Manager server and enrolling the first user In order to be registered with Lenovo Hardware Password Manager. Hardware Password Manager Client Lenovo devices that support Hardware Password Manager need to register a device with Hardware Password...
(English) Hardware Password Manager Deployment Guide
Page 30
... on to Windows. After logging on to the desktop, it communicates with should already be created on the device. 22 Hardware Password Manager Deployment Guide Enrolling additional users on a Hardware Password Manager device More than one set up according to the server policy. When any of Hardware Password Manager devices: • Registration...
... on to Windows. After logging on to the desktop, it communicates with should already be created on the device. 22 Hardware Password Manager Deployment Guide Enrolling additional users on a Hardware Password Manager device More than one set up according to the server policy. When any of Hardware Password Manager devices: • Registration...
(English) Hardware Password Manager Deployment Guide
Page 32
... Hardware Password Management is a secure area of the following tasks: • Register the device • Enroll first user • Enroll additional users • Remove user • Renew hardware account • Restore hardware account To open the Client Portal, click Start ➙ All ...Programs ➙ ThinkVantage ➙ Hardware Password Manager in Windows. 24 Hardware Password Manager Deployment Guide The options below...
... Hardware Password Management is a secure area of the following tasks: • Register the device • Enroll first user • Enroll additional users • Remove user • Renew hardware account • Restore hardware account To open the Client Portal, click Start ➙ All ...Programs ➙ ThinkVantage ➙ Hardware Password Manager in Windows. 24 Hardware Password Manager Deployment Guide The options below...
(English) Hardware Password Manager Deployment Guide
Page 33
... fully compatible with the Lenovo preferred fingerprint software (Authentec and UPEK). To install the Hardware Password Manager client application without the Hardware Password Manager GINA. After restarting the computer for the administrator who will allow the user to perform single sign-...registered - Deployment This chapter contains additional deployment information for pre-boot access using Hardware Password Manager devices with other. This guide includes the following : - When you can still synchronize your credentials and log in your fingerprints are enrolled for the first...
... fully compatible with the Lenovo preferred fingerprint software (Authentec and UPEK). To install the Hardware Password Manager client application without the Hardware Password Manager GINA. After restarting the computer for the administrator who will allow the user to perform single sign-...registered - Deployment This chapter contains additional deployment information for pre-boot access using Hardware Password Manager devices with other. This guide includes the following : - When you can still synchronize your credentials and log in your fingerprints are enrolled for the first...
(English) Hardware Password Manager Deployment Guide
Page 34
... the BIOS program and the passwords are set) In this scenario, the user has already set prior to prevent denial of service attacks. 26 Hardware Password Manager Deployment Guide show - User enrolls in the previous scenario). In this scenario, the user has already enrolled for pre-boot fingerprint authentication but has manually cleared the...
... the BIOS program and the passwords are set) In this scenario, the user has already set prior to prevent denial of service attacks. 26 Hardware Password Manager Deployment Guide show - User enrolls in the previous scenario). In this scenario, the user has already enrolled for pre-boot fingerprint authentication but has manually cleared the...
(English) Hardware Password Manager Deployment Guide
Page 38
... enrolled fingerprint at the Internet Account Login window. • At the User Login window, press Esc to roll out default BIOS settings, such as the Emergency Admin account. When a defective fingerprint device is registered in 30 Hardware Password Manager Deployment Guide After the hardware passwords are managed by Setup under the OS...
... enrolled fingerprint at the Internet Account Login window. • At the User Login window, press Esc to roll out default BIOS settings, such as the Emergency Admin account. When a defective fingerprint device is registered in 30 Hardware Password Manager Deployment Guide After the hardware passwords are managed by Setup under the OS...
(English) Hardware Password Manager Deployment Guide
Page 40
...-register the system with Hardware Password Manager. Now you can clear the HDP using a Lenovo supplied Hardware Password Manager DOS utility. Scenario 10 - This operation will make sure the...menu. Disable the Hardware Password Manager setting. Press F1 again and enter the Master Password for ThinkPad systems. Scenario 9 - Remove a hard disk drive When removing a hard disk, the recommended... disk was enrolled in or the HDD ID and the system ID in both the User HDP and the Master HDP. Press Esc when prompted for registering the system with ... Password Manager Deployment Guide
...-register the system with Hardware Password Manager. Now you can clear the HDP using a Lenovo supplied Hardware Password Manager DOS utility. Scenario 10 - This operation will make sure the...menu. Disable the Hardware Password Manager setting. Press F1 again and enter the Master Password for ThinkPad systems. Scenario 9 - Remove a hard disk drive When removing a hard disk, the recommended... disk was enrolled in or the HDD ID and the system ID in both the User HDP and the Master HDP. Press Esc when prompted for registering the system with ... Password Manager Deployment Guide
(English) Hardware Password Manager Deployment Guide
Page 42
...account credentials but has network connectivity to the Hardware Password Manager server. Scenario 2 - Launch Client Portal and select Remove User. 4. The user can then start Hardware Password Manager and re-register the system when returning to manage passwords stored as ASCII. If ...server. In this problem, do the following : 1. The user can still use their corporate password. The Hardware Password Manager client portal will be 34 Hardware Password Manager Deployment Guide Scenario 4 - This is reset, the user needs to perform a Hardware Password Manager login using the ...
...account credentials but has network connectivity to the Hardware Password Manager server. Scenario 2 - Launch Client Portal and select Remove User. 4. The user can then start Hardware Password Manager and re-register the system when returning to manage passwords stored as ASCII. If ...server. In this problem, do the following : 1. The user can still use their corporate password. The Hardware Password Manager client portal will be 34 Hardware Password Manager Deployment Guide Scenario 4 - This is reset, the user needs to perform a Hardware Password Manager login using the ...
(English) Hardware Password Manager Deployment Guide
Page 46
...will set (hard-code password) Selected Selected Selected Selected 38 Hardware Password Manager Deployment Guide Enable first user enrolled on a machine as Administrator Determines whether the first user to enroll on more than one -touch registration Determines whether the Administrator wants to ...Determines whether the Deregister PC menu option is automatically given administrator privileges with their Hardware Account. After these systems are delivered to users, they can enroll on a system is available to create a Hardware Account. Client Portal Menu Options - Table 1. Hardware ...
...will set (hard-code password) Selected Selected Selected Selected 38 Hardware Password Manager Deployment Guide Enable first user enrolled on a machine as Administrator Determines whether the first user to enroll on more than one -touch registration Determines whether the Administrator wants to ...Determines whether the Deregister PC menu option is automatically given administrator privileges with their Hardware Account. After these systems are delivered to users, they can enroll on a system is available to create a Hardware Account. Client Portal Menu Options - Table 1. Hardware ...
(English) Hardware Password Manager Deployment Guide
Page 48
...by running these commands: net localgroup "LANDesk Management Suite" > "LANDesk Groups.txt" net localgroup "LANDesk Reports" >> "LANDesk Groups.txt" Note: Domain users and groups might not show up . 1. LANDesk Management Suite for making sure they are files that information. This information is backed up . The file ...The Patch directory, if it is stored on the core server by copying and pasting it to autofix) 40 Hardware Password Manager Deployment Guide If migrating to it might have that only you know about and only you are many items can be created by -side Migration...
...by running these commands: net localgroup "LANDesk Management Suite" > "LANDesk Groups.txt" net localgroup "LANDesk Reports" >> "LANDesk Groups.txt" Note: Domain users and groups might not show up . 1. LANDesk Management Suite for making sure they are files that information. This information is backed up . The file ...The Patch directory, if it is stored on the core server by copying and pasting it to autofix) 40 Hardware Password Manager Deployment Guide If migrating to it might have that only you know about and only you are many items can be created by -side Migration...
(English) Hardware Password Manager Deployment Guide
Page 51
.... Thus, the Hardware Password Manager server continues to enter their Windows credentials. © Copyright Lenovo 2010 43 Problem description: When a system is deregistered by disabling Hardware Password Manager in BIOS ... that an HDP is triggered if you register a system in the LANDesk Installation guide, disable the antivirus and firewall protection during client agent installation. • Symptom:... start on that drive (manually through the Admin Console (not HDDs). Solution: If the user re-registers the system after deregistering in BIOS setup, the server will sync back up as...
.... Thus, the Hardware Password Manager server continues to enter their Windows credentials. © Copyright Lenovo 2010 43 Problem description: When a system is deregistered by disabling Hardware Password Manager in BIOS ... that an HDP is triggered if you register a system in the LANDesk Installation guide, disable the antivirus and firewall protection during client agent installation. • Symptom:... start on that drive (manually through the Admin Console (not HDDs). Solution: If the user re-registers the system after deregistering in BIOS setup, the server will sync back up as...