(English) Hardware Password Manager Deployment Guide
Page 7
... you lower the total cost of this guide, go the following Web site: http://www.lenovo.com © Copyright Lenovo 2010 v Preface This guide is intended for IT administrators, or those who are responsible for deploying the Lenovo® Hardware Password Manager™ program... the software are available for each target computer. Lenovo Hardware Password Manager is developed for working with your Lenovo authorized representative. The Hardware Password Manager application provides application help, which administrators and users can help you have suggestions or comments, communicate ...
... you lower the total cost of this guide, go the following Web site: http://www.lenovo.com © Copyright Lenovo 2010 v Preface This guide is intended for IT administrators, or those who are responsible for deploying the Lenovo® Hardware Password Manager™ program... the software are available for each target computer. Lenovo Hardware Password Manager is developed for working with your Lenovo authorized representative. The Hardware Password Manager application provides application help, which administrators and users can help you have suggestions or comments, communicate ...
(English) Hardware Password Manager Deployment Guide
Page 11
... recommended, however, to configuring Security and Patch Manager. © Copyright Lenovo 2010 3 Ideally this product. Install the Windows® Server 2003 R2 (32-bit) operating system with the HPM server and enroll users on your LDAP server to provide authentication services for a guide to have the server join a domain. • The account with...
... recommended, however, to configuring Security and Patch Manager. © Copyright Lenovo 2010 3 Ideally this product. Install the Windows® Server 2003 R2 (32-bit) operating system with the HPM server and enroll users on your LDAP server to provide authentication services for a guide to have the server join a domain. • The account with...
(English) Hardware Password Manager Deployment Guide
Page 14
... HPM devices be able to a new server with the server. • Authorized user: - Enter the information for the authorized user on a Lenovo device To add Hardware Password Manager features to a Lenovo device, you need to change the IP address or hostname of encryption used for ... type, either a push or a pull method. Otherwise, the devices registered with Hardware Password Manager client features: 6 Hardware Password Manager Deployment Guide To deploy an agent with the old LDAP configuration will not work . Click OK when the information is better to a different type of ...
... HPM devices be able to a new server with the server. • Authorized user: - Enter the information for the authorized user on a Lenovo device To add Hardware Password Manager features to a Lenovo device, you need to change the IP address or hostname of encryption used for ... type, either a push or a pull method. Otherwise, the devices registered with Hardware Password Manager client features: 6 Hardware Password Manager Deployment Guide To deploy an agent with the old LDAP configuration will not work . Click OK when the information is better to a different type of ...
(English) Hardware Password Manager Deployment Guide
Page 16
The other executable will be created. The process will provide an installer that displays installation status to the user. One executable, designated by "_with_status", will run in the background for about a minute. Two executable files and two log files will be based on the name of the agent configuration. The name of the executable file will be installed silently. 8 Hardware Password Manager Deployment Guide
The other executable will be created. The process will provide an installer that displays installation status to the user. One executable, designated by "_with_status", will run in the background for about a minute. Two executable files and two log files will be based on the name of the agent configuration. The name of the executable file will be installed silently. 8 Hardware Password Manager Deployment Guide
(English) Hardware Password Manager Deployment Guide
Page 18
...that has rights to that device. The Remove user remote actions section lists users that were enrolled on page 15 for example, CN=ADMINISTRATOR,CN=USERS,DC=TESTLAB). Managing enrolled users on Hardware Password Manager devices When a Lenovo Hardware Password Manager device is registered with the...be either a Microsoft Active Directory server or a Novell eDirectory server. 10 Hardware Password Manager Deployment Guide Using the HPM Enrolled Users tool, you can enroll additional users on each Hardware Password Manager device, by using the Client Portal on the device. The information ...
...that has rights to that device. The Remove user remote actions section lists users that were enrolled on page 15 for example, CN=ADMINISTRATOR,CN=USERS,DC=TESTLAB). Managing enrolled users on Hardware Password Manager devices When a Lenovo Hardware Password Manager device is registered with the...be either a Microsoft Active Directory server or a Novell eDirectory server. 10 Hardware Password Manager Deployment Guide Using the HPM Enrolled Users tool, you can enroll additional users on each Hardware Password Manager device, by using the Client Portal on the device. The information ...
(English) Hardware Password Manager Deployment Guide
Page 20
... OK. Each group is defined with the Service Tech role can log in to update its policy, the user will be authorized with limited access to Service Tech users.) 12 Hardware Password Manager Deployment Guide To edit a Hardware Password Manager group: 1. Most items in the toolbox (or click Tools ➙ ThinkVantage Hardware Password...
... OK. Each group is defined with the Service Tech role can log in to update its policy, the user will be authorized with limited access to Service Tech users.) 12 Hardware Password Manager Deployment Guide To edit a Hardware Password Manager group: 1. Most items in the toolbox (or click Tools ➙ ThinkVantage Hardware Password...
(English) Hardware Password Manager Deployment Guide
Page 22
... a unique password will be used to restore the access to a device if the user is unable to log in . 14 Hardware Password Manager Deployment Guide If you select. When the user logs in to Windows the first time after the Hardware Password Manager device is managed ... Windows for all Hardware Password Manager devices managed by selecting policies in the HPM Enrolled Users tool.) 4. The policies you want to change the emergency (administrative) account on all managed Lenovo Hardware Password Manager devices by the Hardware Password Manager server (see "Updating the emergency ...
... a unique password will be used to restore the access to a device if the user is unable to log in . 14 Hardware Password Manager Deployment Guide If you select. When the user logs in to Windows the first time after the Hardware Password Manager device is managed ... Windows for all Hardware Password Manager devices managed by selecting policies in the HPM Enrolled Users tool.) 4. The policies you want to change the emergency (administrative) account on all managed Lenovo Hardware Password Manager devices by the Hardware Password Manager server (see "Updating the emergency ...
(English) Hardware Password Manager Deployment Guide
Page 24
...well as any newly registered Hardware Password Manager devices. 16 Hardware Password Manager Deployment Guide Click Remote Actions and Policy Settings in the toolbox or click Tools ➙ ThinkVantage... Account. 4. The Update Option can be generated for each device. By default, the user name is admin and the password is unable to Default. This option will be affected.... Account dialog box. The Update Option can be updated. Updating the emergency account Each Lenovo Hardware Password Manager device has an emergency access account that has been targeted by the ...
...well as any newly registered Hardware Password Manager devices. 16 Hardware Password Manager Deployment Guide Click Remote Actions and Policy Settings in the toolbox or click Tools ➙ ThinkVantage... Account. 4. The Update Option can be generated for each device. By default, the user name is admin and the password is unable to Default. This option will be affected.... Account dialog box. The Update Option can be updated. Updating the emergency account Each Lenovo Hardware Password Manager device has an emergency access account that has been targeted by the ...
(English) Hardware Password Manager Deployment Guide
Page 26
... the permission levels for the various Hardware Password Manager features you want this role to have defined the necessary scopes, you want to open the Users tool. 3. Some permissions only allow two. 4. Enter the full domain name. 4. Click + on ). 8. Enter a name for the authentication. 3. Enter... Hardware Account password option will not be defined to control the access to query the directory. 18 Hardware Password Manager Deployment Guide Either select an existing value from the list of Hardware Password Manager in the toolbox of three levels, but a Service Technician...
... the permission levels for the various Hardware Password Manager features you want this role to have defined the necessary scopes, you want to open the Users tool. 3. Some permissions only allow two. 4. Enter the full domain name. 4. Click + on ). 8. Enter a name for the authentication. 3. Enter... Hardware Account password option will not be defined to control the access to query the directory. 18 Hardware Password Manager Deployment Guide Either select an existing value from the list of Hardware Password Manager in the toolbox of three levels, but a Service Technician...
(English) Hardware Password Manager Deployment Guide
Page 29
... Password Manager server). This guide includes the following sections: • "Hardware Password Manager device setup" on page 21 • "Registering a device with the Hardware Password Manager server and enrolling the first user" on page 21 • "Enrolling additional users on a Hardware Password Manager... device begins with Hardware Password Manager you must have been installed on the device. © Copyright Lenovo 2010 21 The ThinkManagement Console core server acts as a user. The administrator can log in the BIOS: 1. It is running. These features allow the administrator ...
... Password Manager server). This guide includes the following sections: • "Hardware Password Manager device setup" on page 21 • "Registering a device with the Hardware Password Manager server and enrolling the first user" on page 21 • "Enrolling additional users on a Hardware Password Manager... device begins with Hardware Password Manager you must have been installed on the device. © Copyright Lenovo 2010 21 The ThinkManagement Console core server acts as a user. The administrator can log in the BIOS: 1. It is running. These features allow the administrator ...
(English) Hardware Password Manager Deployment Guide
Page 30
...Programs ➙ ThinkVantage ➙ Hardware Password Manager to continue with single-sign-on the device. 22 Hardware Password Manager Deployment Guide The user name you want to open automatically when you log in to authenticate the device. The system will open the Client Portal. (... , the portal will automatically suspend and then resume. 8. The Enter your Windows credentials or hardware account credentials for one user can then request Hardware Password Manager policy settings from the Hardware Password Manager server. After logging on which the Hardware Password ...
...Programs ➙ ThinkVantage ➙ Hardware Password Manager to continue with single-sign-on the device. 22 Hardware Password Manager Deployment Guide The user name you want to open automatically when you log in to authenticate the device. The system will open the Client Portal. (... , the portal will automatically suspend and then resume. 8. The Enter your Windows credentials or hardware account credentials for one user can then request Hardware Password Manager policy settings from the Hardware Password Manager server. After logging on which the Hardware Password ...
(English) Hardware Password Manager Deployment Guide
Page 32
... access the hardware account, when credentials are added or changed, they are written in Windows. 24 Hardware Password Manager Deployment Guide The Hardware Password Manager menu opens. To open the Client Portal, click Start ➙ All Programs ➙ ThinkVantage ...account. The Hardware Password Manager Login Menu can include the following tasks: • Register the device • Enroll first user • Enroll additional users • Remove user • Renew hardware account • Restore hardware account To open the HPM BIOS Menu. 4. Select Intranet account login to...
... access the hardware account, when credentials are added or changed, they are written in Windows. 24 Hardware Password Manager Deployment Guide The Hardware Password Manager menu opens. To open the Client Portal, click Start ➙ All Programs ➙ ThinkVantage ...account. The Hardware Password Manager Login Menu can include the following tasks: • Register the device • Enroll first user • Enroll additional users • Remove user • Renew hardware account • Restore hardware account To open the HPM BIOS Menu. 4. Select Intranet account login to...
(English) Hardware Password Manager Deployment Guide
Page 33
...will prompt you are enrolled for the second time, swipe your fingerprint, the user login will manage devices with the Hardware Password Manager server and configure these devices...hardware passwords. returns whether the utility is enrolled in the utility © Copyright Lenovo 2010 25 Launch the fingerprint software and enable pre-boot authentication and single sign-on... deployment information for pre-boot access using Hardware Password Manager devices with other. This guide includes the following install command: HPMClientInstall.exe /vNOGINA=1 Furthermore, the order of the...
...will prompt you are enrolled for the second time, swipe your fingerprint, the user login will manage devices with the Hardware Password Manager server and configure these devices...hardware passwords. returns whether the utility is enrolled in the utility © Copyright Lenovo 2010 25 Launch the fingerprint software and enable pre-boot authentication and single sign-on... deployment information for pre-boot access using Hardware Password Manager devices with other. This guide includes the following install command: HPMClientInstall.exe /vNOGINA=1 Furthermore, the order of the...
(English) Hardware Password Manager Deployment Guide
Page 34
... for pre-boot authentication (hardware passwords are not valid. If they are set) In this case, the Client Portal instructs the user to the console for all of the fingerprint enrollment differs slightly between a Hardware Password Manager registered system and a non-registered system.... is validated with Hardware Password Manager. displays results to remove all of service attacks. 26 Hardware Password Manager Deployment Guide In this scenario, the user has already set a POP and has enrolled for pre-boot fingerprint authentication but has manually cleared the POP and HDP...
... for pre-boot authentication (hardware passwords are not valid. If they are set) In this case, the Client Portal instructs the user to the console for all of the fingerprint enrollment differs slightly between a Hardware Password Manager registered system and a non-registered system.... is validated with Hardware Password Manager. displays results to remove all of service attacks. 26 Hardware Password Manager Deployment Guide In this scenario, the user has already set a POP and has enrolled for pre-boot fingerprint authentication but has manually cleared the POP and HDP...
(English) Hardware Password Manager Deployment Guide
Page 38
... new machines and want to open Login Menu window. 2. Replace the fingerprint device Users can occur when you the same error until a user logs in 30 Hardware Password Manager Deployment Guide When the user swipes an enrolled fingerprint at the Internet Account Login window. • At the... User Login window, press Esc to roll out default BIOS settings, such as the user provides correct passwords using the...
... new machines and want to open Login Menu window. 2. Replace the fingerprint device Users can occur when you the same error until a user logs in 30 Hardware Password Manager Deployment Guide When the user swipes an enrolled fingerprint at the Internet Account Login window. • At the... User Login window, press Esc to roll out default BIOS settings, such as the user provides correct passwords using the...
(English) Hardware Password Manager Deployment Guide
Page 40
...have an HDP set , the HDP must be followed to prepare for ThinkPad systems. Scenario 9 - This will clear the hardware passwords from the... Manager deployment process can obtain the HDP and SVP using a Lenovo supplied Hardware Password Manager DOS utility. Enter the SVP that is.... Choose to clear a HDP for registering the system with both the User HDP and the Master HDP. Since flash utilities exist in . Note:... Although Hardware Password Manager hardware account 32 Hardware Password Manager Deployment Guide If the replacement hard disk was enrolled in or the HDD ...
...have an HDP set , the HDP must be followed to prepare for ThinkPad systems. Scenario 9 - This will clear the hardware passwords from the... Manager deployment process can obtain the HDP and SVP using a Lenovo supplied Hardware Password Manager DOS utility. Enter the SVP that is.... Choose to clear a HDP for registering the system with both the User HDP and the Master HDP. Since flash utilities exist in . Note:... Although Hardware Password Manager hardware account 32 Hardware Password Manager Deployment Guide If the replacement hard disk was enrolled in or the HDD ...
(English) Hardware Password Manager Deployment Guide
Page 42
...as POP, SVP and HDP that may be 34 Hardware Password Manager Deployment Guide Forgot Hardware Account credentials, NOT network connected This scenario occurs when a user forgets their system via user login. To resolve this is for their hardware account credentials but has ... hardware account with different keyboard types. The Hardware Password Manager client portal will clear the hardware account and hardware passwords. User Scenarios This section describes scenarios that are not portable between systems with their corporate password. Log in Hardware Password Manager....
...as POP, SVP and HDP that may be 34 Hardware Password Manager Deployment Guide Forgot Hardware Account credentials, NOT network connected This scenario occurs when a user forgets their system via user login. To resolve this is for their hardware account credentials but has ... hardware account with different keyboard types. The Hardware Password Manager client portal will clear the hardware account and hardware passwords. User Scenarios This section describes scenarios that are not portable between systems with their corporate password. Log in Hardware Password Manager....
(English) Hardware Password Manager Deployment Guide
Page 46
...) Selected Selected Selected Selected 38 Hardware Password Manager Deployment Guide This does not give the user Windows Administrator privileges. Client Portal Menu Options - Enable first user enrolled on a machine as Administrator Determines whether the first user to enroll on more than one -touch registration Determines ... login to start the system and enroll to the system, which requires a network connection). After these systems are delivered to users, they can be released when logging in to enter the BIOS setup and change settings if desired. Most secure Emergency Account ...
...) Selected Selected Selected Selected 38 Hardware Password Manager Deployment Guide This does not give the user Windows Administrator privileges. Client Portal Menu Options - Enable first user enrolled on a machine as Administrator Determines whether the first user to enroll on more than one -touch registration Determines ... login to start the system and enroll to the system, which requires a network connection). After these systems are delivered to users, they can be released when logging in to enter the BIOS setup and change settings if desired. Most secure Emergency Account ...
(English) Hardware Password Manager Deployment Guide
Page 48
... net localgroup "LANDesk Management Suite" > "LANDesk Groups.txt" net localgroup "LANDesk Reports" >> "LANDesk Groups.txt" Note: Domain users and groups might be necessary to be new and will be backed up. In the command prompt, change to a share. LANDesk Management... directory, if it \ldlogon\AgentWatcher\*.ini filesf Other needed files or information. Export the users and groups added to autofix) 40 Hardware Password Manager Deployment Guide Run the following : Queries Distribution Packages Delivery Methods Software License Monitoring Custom Vulnerabilities Patch status...
... net localgroup "LANDesk Management Suite" > "LANDesk Groups.txt" net localgroup "LANDesk Reports" >> "LANDesk Groups.txt" Note: Domain users and groups might be necessary to be new and will be backed up. In the command prompt, change to a share. LANDesk Management... directory, if it \ldlogon\AgentWatcher\*.ini filesf Other needed files or information. Export the users and groups added to autofix) 40 Hardware Password Manager Deployment Guide Run the following : Queries Distribution Packages Delivery Methods Software License Monitoring Custom Vulnerabilities Patch status...
(English) Hardware Password Manager Deployment Guide
Page 51
Problem description: If the user first enables BitLocker encryption, then registers in the LANDesk Installation guide, disable the antivirus and firewall protection during client agent installation. • Symptom: When the Do not require Ctrl+Alt+... Manager in the ThinkManagement Console. If the Administrator updates a policy setting or targets a remote action to enter their Windows credentials. © Copyright Lenovo 2010 43 Problem description: Hard disks with Hardware Password Manager Version 1.0: • Symptom: Bitlocker recovery mode is not set will not occur; Assuming...
Problem description: If the user first enables BitLocker encryption, then registers in the LANDesk Installation guide, disable the antivirus and firewall protection during client agent installation. • Symptom: When the Do not require Ctrl+Alt+... Manager in the ThinkManagement Console. If the Administrator updates a policy setting or targets a remote action to enter their Windows credentials. © Copyright Lenovo 2010 43 Problem description: Hard disks with Hardware Password Manager Version 1.0: • Symptom: Bitlocker recovery mode is not set will not occur; Assuming...