(English) Hardware Password Manager Deployment Guide
Page 5
Hardware passwords already set 30 Scenario 5 - Remove a hard disk drive . . . 32 Scenario 11 - Manual login using different keyboard types 34 Scenario 5 - CMOS error 29 Scenario 3 - Setup under the operating system (remote BIOS settings 30 ... 35 Scenario 6 - Deployment 25 Fingerprint integration 25 Safe Guard Easy/Safe Guard Enterprise compatibility 26 One-touch registration 26 Pre-registration 27 User enrollment on a Lenovo device 6 Chapter 3. Hardware configuration changes 29 Scenario 2 - Replace or move a hard disk drive 31 Scenario 9 - Forgot Hardware Account...
Hardware passwords already set 30 Scenario 5 - Remove a hard disk drive . . . 32 Scenario 11 - Manual login using different keyboard types 34 Scenario 5 - CMOS error 29 Scenario 3 - Setup under the operating system (remote BIOS settings 30 ... 35 Scenario 6 - Deployment 25 Fingerprint integration 25 Safe Guard Easy/Safe Guard Enterprise compatibility 26 One-touch registration 26 Pre-registration 27 User enrollment on a Lenovo device 6 Chapter 3. Hardware configuration changes 29 Scenario 2 - Replace or move a hard disk drive 31 Scenario 9 - Forgot Hardware Account...
(English) Hardware Password Manager Deployment Guide
Page 34
... passwords are cleared) In this scenario, the user has already enrolled for pre-boot fingerprint authentication but has manually cleared the POP and HDP (as when any pre-boot passwords are retrieved from unauthorized users during the deployment and distribution process. The system...are stored in the Hardware Password Manager server with Hardware Password Manager. This process requires a single manual step (one-touch) to the console for Hardware Password Manager User Login credentials (Hardware account ID and password) instead of the fingerprint enrollment differs slightly between a...
... passwords are cleared) In this scenario, the user has already enrolled for pre-boot fingerprint authentication but has manually cleared the POP and HDP (as when any pre-boot passwords are retrieved from unauthorized users during the deployment and distribution process. The system...are stored in the Hardware Password Manager server with Hardware Password Manager. This process requires a single manual step (one-touch) to the console for Hardware Password Manager User Login credentials (Hardware account ID and password) instead of the fingerprint enrollment differs slightly between a...
(English) Hardware Password Manager Deployment Guide
Page 35
... registration process, except for confirmation to authenticate the registration request are protected with the suspend and resume operation without notifying the user. 6. Based on policy) for corporate, Windows, or hardware account credentials. The client portal does not prompt for the ...credentials are not required since no network connection is available or the Hardware Password Manager server is enrolled. 5. The one manual step required by the administrator to the calling process and restarts automatically. The hardware account is already registered. After restarting...
... registration process, except for confirmation to authenticate the registration request are protected with the suspend and resume operation without notifying the user. 6. Based on policy) for corporate, Windows, or hardware account credentials. The client portal does not prompt for the ...credentials are not required since no network connection is available or the Hardware Password Manager server is enrolled. 5. The one manual step required by the administrator to the calling process and restarts automatically. The hardware account is already registered. After restarting...
(English) Hardware Password Manager Deployment Guide
Page 37
Hardware changes on Lenovo ThinkPads do not match, an error notification is generated to inform the user that is not known on all systems are prompted to enter your administrator password (PAP/SVP) in CMOS memory, a checksum is triggered and you are... CMOS error To protect BIOS settings in order to clear the BIOS error. Scenarios This chapter describes scenarios associated with Hardware Password Manager User privileges are made to the manual login and enter the PAP/SVP. Hardware configuration changes When you can start the operating system. After you to enter BIOS setup...
Hardware changes on Lenovo ThinkPads do not match, an error notification is generated to inform the user that is not known on all systems are prompted to enter your administrator password (PAP/SVP) in CMOS memory, a checksum is triggered and you are... CMOS error To protect BIOS settings in order to clear the BIOS error. Scenarios This chapter describes scenarios associated with Hardware Password Manager User privileges are made to the manual login and enter the PAP/SVP. Hardware configuration changes When you can start the operating system. After you to enter BIOS setup...
(English) Hardware Password Manager Deployment Guide
Page 38
... for the PAP/SVP. • Enter corporate credentials by the user, registration will no longer using the Fingerprint Setup Utility. To regain fingerprint access, the user must manually clear hardware passwords before registering. When starting the system. Setup under... can occur when you can enroll their fingerprint. If a user disables Hardware Password Manager either manual, User Login or Hardware Password Manager Login. Scenario 3 - Replace the fingerprint device Users can obtain using the ThinkManagement Console. The fingerprint swipe prompt will...
... for the PAP/SVP. • Enter corporate credentials by the user, registration will no longer using the Fingerprint Setup Utility. To regain fingerprint access, the user must manually clear hardware passwords before registering. When starting the system. Setup under... can occur when you can enroll their fingerprint. If a user disables Hardware Password Manager either manual, User Login or Hardware Password Manager Login. Scenario 3 - Replace the fingerprint device Users can obtain using the ThinkManagement Console. The fingerprint swipe prompt will...
(English) Hardware Password Manager Deployment Guide
Page 39
...enter BIOS setup and disable Hardware Password Manager • ThinkPad - Scenario 7 - Renew Hardware Account will inform the user that the system board is replaced, the POP, SVP, hardware account, and server credentials no longer be retrieved using a Lenovo supplied Hardware Password Manager DOS utility. If you do...of the structures on all of a system registered with the new system board in the machine and set . You can obtain it manually. Note: When replacing a system board, you must clear or disable Hardware Password Manager prior to enter the BIOS setup and disable ...
...enter BIOS setup and disable Hardware Password Manager • ThinkPad - Scenario 7 - Renew Hardware Account will inform the user that the system board is replaced, the POP, SVP, hardware account, and server credentials no longer be retrieved using a Lenovo supplied Hardware Password Manager DOS utility. If you do...of the structures on all of a system registered with the new system board in the machine and set . You can obtain it manually. Note: When replacing a system board, you must clear or disable Hardware Password Manager prior to enter the BIOS setup and disable ...
(English) Hardware Password Manager Deployment Guide
Page 40
... in case the HDP is to deregister the system prior to prepare for ThinkPad systems. Scenario 9 - Press Esc when prompted for the hard disk. ...(applied using a Lenovo supplied Hardware Password Manager DOS utility. Select Security and then select Password. The HDD ID and machine ID can be cleared manually using the ThinkManagement ...Console. Since flash utilities exist in the future, or clean them up using the BIOS Setup Utility. Remove a hard disk drive When removing a hard disk, the recommended solution is ever needed in both the User...
... in case the HDP is to deregister the system prior to prepare for ThinkPad systems. Scenario 9 - Press Esc when prompted for the hard disk. ...(applied using a Lenovo supplied Hardware Password Manager DOS utility. Select Security and then select Password. The HDD ID and machine ID can be cleared manually using the ThinkManagement ...Console. Since flash utilities exist in the future, or clean them up using the BIOS Setup Utility. Remove a hard disk drive When removing a hard disk, the recommended solution is ever needed in both the User...
(English) Hardware Password Manager Deployment Guide
Page 41
... Manager server will be accomplished by de-registering the system using the BIOS Setup Utility. In order to identify these ways: • User Login - When default settings are stored in a docking station. The system must obtain the SVP and HDPs using the ThinkManagement Console. ... in the BIOS setup This scenario describes the implications of the Service Tech or Hardware Password Manager Administrator group. • Manual Login - Scenario 13 - User must have been updated to disable Hardware Password Manager. Scenario 15 - structures are loaded, the POP, SVP remain set...
... Manager server will be accomplished by de-registering the system using the BIOS Setup Utility. In order to identify these ways: • User Login - When default settings are stored in a docking station. The system must obtain the SVP and HDPs using the ThinkManagement Console. ... in the BIOS setup This scenario describes the implications of the Service Tech or Hardware Password Manager Administrator group. • Manual Login - Scenario 13 - User must have been updated to disable Hardware Password Manager. Scenario 15 - structures are loaded, the POP, SVP remain set...
(English) Hardware Password Manager Deployment Guide
Page 42
... Password Manager Deployment Guide Trying to Windows by manually entering their account in Hardware Password Manager. The user can reset their corporate password using their corporate process (website or manual reset by IT Administrator). The user can then start Hardware Password Manager and re-... be able to or from the Hardware Password Manager Services menu. • Log into Windows by manually entering their Windows credentials. • Launch the Client Portal and select Remove User. • Re-enroll the account in Hardware Password Manager. Note: The hard drive should do...
... Password Manager Deployment Guide Trying to Windows by manually entering their account in Hardware Password Manager. The user can reset their corporate password using their corporate process (website or manual reset by IT Administrator). The user can then start Hardware Password Manager and re-... be able to or from the Hardware Password Manager Services menu. • Log into Windows by manually entering their Windows credentials. • Launch the Client Portal and select Remove User. • Re-enroll the account in Hardware Password Manager. Note: The hard drive should do...
(English) Hardware Password Manager Deployment Guide
Page 43
... (BIOS passwords are sent to the client to start since the integrity check on BIOS passwords (PCR1) will have to manually enter their data using BitLocker (logical volume encryption). If the user continues, then BitLocker Recovery Mode will be set in Hardware Password Manager, the fact that BIOS passwords are set of...
... (BIOS passwords are sent to the client to start since the integrity check on BIOS passwords (PCR1) will have to manually enter their data using BitLocker (logical volume encryption). If the user continues, then BitLocker Recovery Mode will be set in Hardware Password Manager, the fact that BIOS passwords are set of...
(English) Hardware Password Manager Deployment Guide
Page 45
...user will have to manually enter the SVP if necessary (for the Hardware Account each time. Hardware Password Manager policy settings Policy setting Description Client - BIOS Policy Show last logon account for Hardware Account Determines whether BIOS should cache the Hardware Account user...Selected (hard-code password) Selected (hard-code password) © Copyright Lenovo 2010 37 The following table illustrates how Hardware Password Manager policy settings can make it easier for the administrator to manually enter the MHDP if necessary (for Hardware Account on Password (POP) ...
...user will have to manually enter the SVP if necessary (for the Hardware Account each time. Hardware Password Manager policy settings Policy setting Description Client - BIOS Policy Show last logon account for Hardware Account Determines whether BIOS should cache the Hardware Account user...Selected (hard-code password) Selected (hard-code password) © Copyright Lenovo 2010 37 The following table illustrates how Hardware Password Manager policy settings can make it easier for the administrator to manually enter the MHDP if necessary (for Hardware Account on Password (POP) ...
(English) Hardware Password Manager Deployment Guide
Page 46
...perform an intranet login to start the system and enroll to users when performing an intranet login. Enable one system. This will allow the user to pre-register systems in a staging area without manually entering hardware passwords or requiring an intranet login (which will set... Most convenient Emergency Account set hardware passwords and create the Emergency Account. Table 1. General tab Allow users to the system without enrolling any end users. Client Portal tab Deregister PC Determines whether the Deregister PC menu option is automatically given administrator privileges ...
...perform an intranet login to start the system and enroll to users when performing an intranet login. Enable one system. This will allow the user to pre-register systems in a staging area without manually entering hardware passwords or requiring an intranet login (which will set... Most convenient Emergency Account set hardware passwords and create the Emergency Account. Table 1. General tab Allow users to the system without enrolling any end users. Client Portal tab Deregister PC Determines whether the Deregister PC menu option is automatically given administrator privileges ...
(English) Hardware Password Manager Deployment Guide
Page 51
...intranet for long periods of the Hardware Password Manager server. • Symptom: If user moves a hard disk from one Hardware Password Manager registered system to enter their Windows credentials. © Copyright Lenovo 2010 43 To allow for consistency between all HDPs are handled as registered. HDPs ... it to Windows will not work since the assumption is the HDP is common between desktop and mobile, all drives on that drive (manually through the Admin Console (not HDDs). If the Administrator updates a policy setting or targets a remote action to the deregistered system, the...
...intranet for long periods of the Hardware Password Manager server. • Symptom: If user moves a hard disk from one Hardware Password Manager registered system to enter their Windows credentials. © Copyright Lenovo 2010 43 To allow for consistency between all HDPs are handled as registered. HDPs ... it to Windows will not work since the assumption is the HDP is common between desktop and mobile, all drives on that drive (manually through the Admin Console (not HDDs). If the Administrator updates a policy setting or targets a remote action to the deregistered system, the...
(English) Access Connections Profile Deployment guide
Page 9
... Switch between location profiles Access Connections allows you to various types of your wireless adapter. Access Connections provides portability when users are away from place to place, Access Connections can create and manage location profiles that are traveling or in range... to support automatic location switching between location profiles. If the connection fails, a button appears to reconfigure network settings manually. If the © Lenovo 2008. Portions © IBM Corp. 2005. 1 By switching between location profiles as effective alternatives for the components...
... Switch between location profiles Access Connections allows you to various types of your wireless adapter. Access Connections provides portability when users are away from place to place, Access Connections can create and manage location profiles that are traveling or in range... to support automatic location switching between location profiles. If the connection fails, a button appears to reconfigure network settings manually. If the © Lenovo 2008. Portions © IBM Corp. 2005. 1 By switching between location profiles as effective alternatives for the components...
(English) Access Connections Profile Deployment guide
Page 10
... for a detected wireless network if you to the client computers. You can also manually create a location profile for deploying Access Connections Collecting information about the various places where users might attempt to connect and the kinds of connections available in those locations will help... an icon in a corporate environment. The deployment of supported ThinkPad® systems and wireless WLAN and WAN drivers, see the following Web site: http://www.lenovo.com/pc/support/site.wss/document.do?sitestyle= lenovo&lndocid=MIGR-4ZLNJB 2 Access Connections Deployment Guide You can be...
... for a detected wireless network if you to the client computers. You can also manually create a location profile for deploying Access Connections Collecting information about the various places where users might attempt to connect and the kinds of connections available in those locations will help... an icon in a corporate environment. The deployment of supported ThinkPad® systems and wireless WLAN and WAN drivers, see the following Web site: http://www.lenovo.com/pc/support/site.wss/document.do?sitestyle= lenovo&lndocid=MIGR-4ZLNJB 2 Access Connections Deployment Guide You can be...
(English) Access Connections Profile Deployment guide
Page 19
... when you to type individual serial numbers or to create different groups of serial numbers that represent different organizations of users who need different location profiles. Figure 7. Client Configuration Policy This setting defines the Client Configuration Policy, which contain ...the Find Wireless Network function for updates. This optional step is designed primarily for manual importing. The Distribution Control List helps reduce unauthorized network access. v Checking for Windows users without administrator privileges. v Change global settings, see "Global settings" on their...
... when you to type individual serial numbers or to create different groups of serial numbers that represent different organizations of users who need different location profiles. Figure 7. Client Configuration Policy This setting defines the Client Configuration Policy, which contain ...the Find Wireless Network function for updates. This optional step is designed primarily for manual importing. The Distribution Control List helps reduce unauthorized network access. v Checking for Windows users without administrator privileges. v Change global settings, see "Global settings" on their...
(English) Access Connections Profile Deployment guide
Page 29
.... You can select import from the manage profiles window and manually import the package by administrator. Create an Access Connections distribution package (*.loa and...include the modified client configuration policy. Install the integrated package as desired for client users, you can also manage and deploy new, updated, or revised location profiles to... distribution package silently. After restarting the system, Access Connection is C:\Program Files\ThinkPad\ConnectUtilities). 4. For © Lenovo 2008. Include the distribution package .loa and .sig files in Appendix B, ...
.... You can select import from the manage profiles window and manually import the package by administrator. Create an Access Connections distribution package (*.loa and...include the modified client configuration policy. Install the integrated package as desired for client users, you can also manage and deploy new, updated, or revised location profiles to... distribution package silently. After restarting the system, Access Connection is C:\Program Files\ThinkPad\ConnectUtilities). 4. For © Lenovo 2008. Include the distribution package .loa and .sig files in Appendix B, ...
Hardware Maintenance Manual
Page 64
...Windows operating system. The length of DVDs to restore the computer to complete the Windows setup. Select your language and click Next. 56 ThinkPad T400 and R400 Hardware Maintenance Manual Follow the instructions on page 354. b. If you do the following procedure: a. For information on which discs to order, see "... configuration using Recovery Disc Set When the hard disk drive (HDD) or solid state drive (SSD) is replaced because of the user instructions and the following set , do not have a DVD drive to select Startup → Boot. Press F10 to start the recovery process.
...Windows operating system. The length of DVDs to restore the computer to complete the Windows setup. Select your language and click Next. 56 ThinkPad T400 and R400 Hardware Maintenance Manual Follow the instructions on page 354. b. If you do the following procedure: a. For information on which discs to order, see "... configuration using Recovery Disc Set When the hard disk drive (HDD) or solid state drive (SSD) is replaced because of the user instructions and the following set , do not have a DVD drive to select Startup → Boot. Press F10 to start the recovery process.
Hardware Maintenance Manual
Page 66
... to reset the password. Note: To check whether the ThinkPad Notebook you have forgotten, do the following: (A) If no master HDP is available, neither Lenovo nor Lenovo authorized service technicians provide any services to reset either the user or the master HDP, or to recover data from the...Attention: If the SVP has been forgotten and cannot be used for the HDP: User only and Master + User. Turn on the computer and wait until the POST ends. Select Password. 58 ThinkPad T400 and R400 Hardware Maintenance Manual Turn off the computer. 2. For how to remove the battery pack, see "...
... to reset the password. Note: To check whether the ThinkPad Notebook you have forgotten, do the following: (A) If no master HDP is available, neither Lenovo nor Lenovo authorized service technicians provide any services to reset either the user or the master HDP, or to recover data from the...Attention: If the SVP has been forgotten and cannot be used for the HDP: User only and Master + User. Turn on the computer and wait until the POST ends. Select Password. 58 ThinkPad T400 and R400 Hardware Maintenance Manual Turn off the computer. 2. For how to remove the battery pack, see "...
Hardware Maintenance Manual
Page 68
... the computer into sleep (standby) mode automatically: v If a "suspend time" has been set on the timer, and the user does not do not set on the power switch. 60 ThinkPad T400 and R400 Hardware Maintenance Manual Press Fn+F3. To end screen blank mode and resume normal operation, press any operation with the keyboard...
... the computer into sleep (standby) mode automatically: v If a "suspend time" has been set on the timer, and the user does not do not set on the power switch. 60 ThinkPad T400 and R400 Hardware Maintenance Manual Press Fn+F3. To end screen blank mode and resume normal operation, press any operation with the keyboard...