(Japanese) Hardware Password Manager Deployment Guide
Page 24
... hardware account): BIOS BIOS Prompt for hardware account on warm boot BIOS Update Client Policy Reset to default Update Client Policy 3 1 Apply to Server Setting only Hardware Password Manager 2 Generate Remote Actions only Hardware Password Manager 3. 両方 (Both Hardware Password Manager Lenovo Hardware Password Manager は、Hardware Password Manager Hardware...
... hardware account): BIOS BIOS Prompt for hardware account on warm boot BIOS Update Client Policy Reset to default Update Client Policy 3 1 Apply to Server Setting only Hardware Password Manager 2 Generate Remote Actions only Hardware Password Manager 3. 両方 (Both Hardware Password Manager Lenovo Hardware Password Manager は、Hardware Password Manager Hardware...
(Japanese) Hardware Password Manager Deployment Guide
Page 47
...35500;明 BIOS BIOS Policy) Show last logon account for Hardware Account) BIOS 選択なし Prompt for Hardware Account on warm boot) 選択 Common Hardware Passwords) 共通 SVP Set Common SVP) SVP SVP SVP BIOS 共通 POP Set Common POP...20415;利 選択 選択なし ワード) ワード) ワード) © Copyright Lenovo 2010 39 付録 A Hardware Password Manager 表 1.
...35500;明 BIOS BIOS Policy) Show last logon account for Hardware Account) BIOS 選択なし Prompt for Hardware Account on warm boot) 選択 Common Hardware Passwords) 共通 SVP Set Common SVP) SVP SVP SVP BIOS 共通 POP Set Common POP...20415;利 選択 選択なし ワード) ワード) ワード) © Copyright Lenovo 2010 39 付録 A Hardware Password Manager 表 1.
(Japanese) Hardware Password Manager Deployment Guide
Page 51
Queries RBA 構成 (LANDesk Template Unmanaged Device Discovery Configure Services PXE Boot 付 録 B 43
Queries RBA 構成 (LANDesk Template Unmanaged Device Discovery Configure Services PXE Boot 付 録 B 43
(English) Hardware Password Manager Deployment Guide
Page 5
.... 21 Enrolling additional users on a Hardware Password Manager device 22 Removing a user from a Hardware Password Manager device 23 Unregistering a device from multiple boot partitions 35 Scenario 6 - Add a hard disk drive . . . . . 31 Scenario 8 - Flashing the BIOS 32 Scenario 12 - Handling ... an LDAP server connection . . . 10 Viewing Hardware Password Manager users and their properties 9 Managing enrolled users on a Lenovo device 6 Chapter 3. Managing Hardware Password Manager devices with HPM server setup 5 Migrating to a Hardware Password Manager device 12 ...
.... 21 Enrolling additional users on a Hardware Password Manager device 22 Removing a user from a Hardware Password Manager device 23 Unregistering a device from multiple boot partitions 35 Scenario 6 - Add a hard disk drive . . . . . 31 Scenario 8 - Flashing the BIOS 32 Scenario 12 - Handling ... an LDAP server connection . . . 10 Viewing Hardware Password Manager users and their properties 9 Managing enrolled users on a Lenovo device 6 Chapter 3. Managing Hardware Password Manager devices with HPM server setup 5 Migrating to a Hardware Password Manager device 12 ...
(English) Hardware Password Manager Deployment Guide
Page 9
...HPM server-it uses the Hardware Password Manager client application to communicate with a Web service on the LDAP server. After the client has booted to BIOS using his desktop. for the devices; Further, it communicates through an HTTPS channel. The user also has the option to...does not know what the actual hardware passwords are available on , it creates the notion of the policy definition. © Copyright Lenovo 2010 1 Overview The Lenovo Hardware Password Manager (HPM) gives an administrator the ability to his fingerprint. If provided, the device will login the user to ...
...HPM server-it uses the Hardware Password Manager client application to communicate with a Web service on the LDAP server. After the client has booted to BIOS using his desktop. for the devices; Further, it communicates through an HTTPS channel. The user also has the option to...does not know what the actual hardware passwords are available on , it creates the notion of the policy definition. © Copyright Lenovo 2010 1 Overview The Lenovo Hardware Password Manager (HPM) gives an administrator the ability to his fingerprint. If provided, the device will login the user to ...
(English) Hardware Password Manager Deployment Guide
Page 23
... screen, the last user account to have logged on to the BIOS is displayed bydefault. • Prompt for hardware account on warm boot: if the device is restarted, the BIOS will require a user login to ensure that the same user is accessing the device after the... of policy settings; So newly registered Hardware Password Manager devices will have the new policy applied on a device. Updating hardware passwords globally Lenovo Hardware Password Manager provides global management of devices shows which devices will not be applied to be affected. 3. The master hard disk password...
... screen, the last user account to have logged on to the BIOS is displayed bydefault. • Prompt for hardware account on warm boot: if the device is restarted, the BIOS will require a user login to ensure that the same user is accessing the device after the... of policy settings; So newly registered Hardware Password Manager devices will have the new policy applied on a device. Updating hardware passwords globally Lenovo Hardware Password Manager provides global management of devices shows which devices will not be applied to be affected. 3. The master hard disk password...
(English) Hardware Password Manager Deployment Guide
Page 25
... ➙ ThinkVantage Hardware Password Manager ➙ Remote Actions and Policy Settings. 2. Select Enable "one -touch features from Lenovo. One-touch registration automatically registers the device and creates the emergency admin account when the user logs in to pre-register new... maximum password length is running. The user accesses the portal from Hardware Password Manager device management. The portal service is booted and requests an updated policy. Changing server policy settings Server policy settings include various ways to save for hardware passwords. The...
... ➙ ThinkVantage Hardware Password Manager ➙ Remote Actions and Policy Settings. 2. Select Enable "one -touch features from Lenovo. One-touch registration automatically registers the device and creates the emergency admin account when the user logs in to pre-register new... maximum password length is running. The user accesses the portal from Hardware Password Manager device management. The portal service is booted and requests an updated policy. Changing server policy settings Server policy settings include various ways to save for hardware passwords. The...
(English) Hardware Password Manager Deployment Guide
Page 33
... Hardware Password Manager GINA. If you see the fingerprint enrollment wizard and the Hardware Password Manager registration wizard displayed at pre-boot. However, if you enroll your fingerprints with the Lenovo preferred fingerprint software (Authentec and UPEK). From this point on you will be able to single-sign-on page 26 Fingerprint...
... Hardware Password Manager GINA. If you see the fingerprint enrollment wizard and the Hardware Password Manager registration wizard displayed at pre-boot. However, if you enroll your fingerprints with the Lenovo preferred fingerprint software (Authentec and UPEK). From this point on you will be able to single-sign-on page 26 Fingerprint...
(English) Hardware Password Manager Deployment Guide
Page 34
...cleared) In this scenario, the user has already enrolled for pre-boot fingerprint authentication but has manually cleared the POP and HDP (as when any pre-boot passwords are set a POP and has enrolled for pre-boot authentication (hardware passwords are validated. However, the next time the...the Safe Guard Easy/Safe Guard Enterprise utility is used, the Hardware Password Manager client must be installed after enrolling fingerprints for pre-boot fingerprint authentication. User enrolls in the utility - If they are stored in the fingerprint device. - displays results to remove all of...
...cleared) In this scenario, the user has already enrolled for pre-boot fingerprint authentication but has manually cleared the POP and HDP (as when any pre-boot passwords are set a POP and has enrolled for pre-boot authentication (hardware passwords are validated. However, the next time the...the Safe Guard Easy/Safe Guard Enterprise utility is used, the Hardware Password Manager client must be installed after enrolling fingerprints for pre-boot fingerprint authentication. User enrolls in the utility - If they are stored in the fingerprint device. - displays results to remove all of...
(English) Hardware Password Manager Deployment Guide
Page 40
... clear the HDP, you should provide credentials that can obtain the HDP and SVP using a Lenovo supplied Hardware Password Manager DOS utility. The HDD ID and machine ID can be tested with...has a wired connection to the corporate network, press Esc at the Hardware Password Manager pre-boot log in both the User HDP and the Master HDP. Install the replacement hard disk ...removing a hard disk, the recommended solution is to deregister the system prior to clear a HDP for ThinkPad systems. Scenario 9 - Flashing the BIOS This scenario describes the impact to Hardware Password Manager when ...
... clear the HDP, you should provide credentials that can obtain the HDP and SVP using a Lenovo supplied Hardware Password Manager DOS utility. The HDD ID and machine ID can be tested with...has a wired connection to the corporate network, press Esc at the Hardware Password Manager pre-boot log in both the User HDP and the Master HDP. Install the replacement hard disk ...removing a hard disk, the recommended solution is to deregister the system prior to clear a HDP for ThinkPad systems. Scenario 9 - Flashing the BIOS This scenario describes the impact to Hardware Password Manager when ...
(English) Hardware Password Manager Deployment Guide
Page 43
... are set of this case, the Hardware Password Manager Client code should register and enroll in Hardware Password Manager from multiple boot partitions This scenario can choose to do this point. After being enrolled, Hardware Password Manager functions normally in all... the next start . Scenarios 35 a completely different set will cause BitLocker to fail its integrity check (BIOS passwords are the same in all boot partitions where the Hardware Password Manager Client code is to enroll in Hardware Password Manager prior to enabling BitLocker. Scenario 6 - BitLocker enrollment and ...
... are set of this case, the Hardware Password Manager Client code should register and enroll in Hardware Password Manager from multiple boot partitions This scenario can choose to do this point. After being enrolled, Hardware Password Manager functions normally in all... the next start . Scenarios 35 a completely different set will cause BitLocker to fail its integrity check (BIOS passwords are the same in all boot partitions where the Hardware Password Manager Client code is to enroll in Hardware Password Manager prior to enabling BitLocker. Scenario 6 - BitLocker enrollment and ...
(English) Hardware Password Manager Deployment Guide
Page 45
... selected Selected (hard-code password) Selected (hard-code password) Selected (hard-code password) Selected (hard-code password) © Copyright Lenovo 2010 37 Security and convenience Computer security is not cached and the user will have to enter it easier for the administrator to generate ... to a common hard-coded value or to generate the POP automatically. Set Common UHDP Determines whether to set the Power-on warm boot Determines whether to prompt for example, to manually enter the SVP if necessary (for the Hardware Account each time. Appendix A. The following...
... selected Selected (hard-code password) Selected (hard-code password) Selected (hard-code password) Selected (hard-code password) © Copyright Lenovo 2010 37 Security and convenience Computer security is not cached and the user will have to enter it easier for the administrator to generate ... to a common hard-coded value or to generate the POP automatically. Set Common UHDP Determines whether to set the Power-on warm boot Determines whether to prompt for example, to manually enter the SVP if necessary (for the Hardware Account each time. Appendix A. The following...
(English) Hardware Password Manager Deployment Guide
Page 49
... for the LANDesk users and for the Template user Preferred Server settings Unmanaged Device Discovery configurations Preferred Server settings Settings under Configure ➙ Services PXE Boot Menu Security and Patch settings Document any custom changes made custom alterations or changes for your operating environment. Most of such configurations so that they...
... for the LANDesk users and for the Template user Preferred Server settings Unmanaged Device Discovery configurations Preferred Server settings Settings under Configure ➙ Services PXE Boot Menu Security and Patch settings Document any custom changes made custom alterations or changes for your operating environment. Most of such configurations so that they...
(English) Hardware Password Manager Deployment Guide
Page 51
... registered. Appendix C. If the Administrator updates a policy setting or targets a remote action to enter their Windows credentials. © Copyright Lenovo 2010 43 Problem description: If the user first enables BitLocker encryption, then registers in Hardware Password Manager prior to remove the HDP on... the next boot. HDPs are set via policy). 3. Hints and tips The following is a list of the action will show up with passwords ...
... registered. Appendix C. If the Administrator updates a policy setting or targets a remote action to enter their Windows credentials. © Copyright Lenovo 2010 43 Problem description: If the user first enables BitLocker encryption, then registers in Hardware Password Manager prior to remove the HDP on... the next boot. HDPs are set via policy). 3. Hints and tips The following is a list of the action will show up with passwords ...
(English) BIOS Setup using Windows Management Instrumentation Deployment Guide
Page 5
... a supervisor password exists 23 Appendix B. Security 15 Appendix A. Contents Preface v Chapter 1. Notices 29 Trademarks 30 © Copyright Lenovo 2008, 2012 iii Typical usage 13 Listing current BIOS settings 13 Changing BIOS settings 13 Changing the boot order 13 Restoring default settings 14 Changing an existing hardware password . . . . 14 Limitations 14 Chapter 4. Overview...
... a supervisor password exists 23 Appendix B. Security 15 Appendix A. Contents Preface v Chapter 1. Notices 29 Trademarks 30 © Copyright Lenovo 2008, 2012 iii Typical usage 13 Listing current BIOS settings 13 Changing BIOS settings 13 Changing the boot order 13 Restoring default settings 14 Changing an existing hardware password . . . . 14 Limitations 14 Chapter 4. Overview...
(English) BIOS Setup using Windows Management Instrumentation Deployment Guide
Page 7
...Preface The purpose of ownership and to check for periodic updates to this guide, visit the following Web site: http://www.lenovo.com/support © Copyright Lenovo 2008, 2012 v This guide is developed for IT professionals to assist with the unique challenges that contains this deployment guide... as well as Visual Basic sample scripts to modify BIOS passwords, settings, and boot order using Windows Management Instrumentation (WMI) through the Lenovo client-management interface. This deployment guide is provided in their organizations.
...Preface The purpose of ownership and to check for periodic updates to this guide, visit the following Web site: http://www.lenovo.com/support © Copyright Lenovo 2008, 2012 v This guide is developed for IT professionals to assist with the unique challenges that contains this deployment guide... as well as Visual Basic sample scripts to modify BIOS passwords, settings, and boot order using Windows Management Instrumentation (WMI) through the Lenovo client-management interface. This deployment guide is provided in their organizations.
(English) BIOS Setup using Windows Management Instrumentation Deployment Guide
Page 9
... Instrumentation WMI is provided as query-based information retrieval and event notification, which include passwords, hardware settings, and the boot order. The Lenovo BIOS WMI interface provides a simplified way to their factory defaults, change single settings, reset or change a single BIOS... setting or all BIOS settings © Copyright Lenovo 2008, 2012 1 Lenovo has developed a BIOS interface that can write your scripts in most Windows® operating systems. It provides a powerful set...
... Instrumentation WMI is provided as query-based information retrieval and event notification, which include passwords, hardware settings, and the boot order. The Lenovo BIOS WMI interface provides a simplified way to their factory defaults, change single settings, reset or change a single BIOS... setting or all BIOS settings © Copyright Lenovo 2008, 2012 1 Lenovo has developed a BIOS interface that can write your scripts in most Windows® operating systems. It provides a powerful set...
(English) BIOS Setup using Windows Management Instrumentation Deployment Guide
Page 21
...on page 20 for sample scripts). Specify a new boot order by listing the boot devices in the following example, the CD drive 0 is the first boot device and hard disk drive 0 is the second startup device. ATAPICD0:HDD0 © Copyright Lenovo 2008, 2012 13 Note: See Table 4 "List... are not specified are case sensitive. In the following ways: • List BIOS settings • Change BIOS settings • Change the boot order (sometimes referred to change a BIOS setting, complete the following steps: 1. Devices that can configure BIOS settings in order, separated by ...
...on page 20 for sample scripts). Specify a new boot order by listing the boot devices in the following example, the CD drive 0 is the first boot device and hard disk drive 0 is the second startup device. ATAPICD0:HDD0 © Copyright Lenovo 2008, 2012 13 Note: See Table 4 "List... are not specified are case sensitive. In the following ways: • List BIOS settings • Change BIOS settings • Change the boot order (sometimes referred to change a BIOS setting, complete the following steps: 1. Devices that can configure BIOS settings in order, separated by ...
(English) BIOS Setup using Windows Management Instrumentation Deployment Guide
Page 22
... a supervisor password exists" on page 23 for sample scripts). Passwords can only be updated or cleared. 14 Lenovo BIOS Setup using this method when one of them. • A password cannot be changed at the same boot as power-on • "uhdp1": User HDP 1 • "mhdp1": Master HDP 1 • "uhdp2": User HDP 2 •...
... a supervisor password exists" on page 23 for sample scripts). Passwords can only be updated or cleared. 14 Lenovo BIOS Setup using this method when one of them. • A password cannot be changed at the same boot as power-on • "uhdp1": User HDP 1 • "mhdp1": Master HDP 1 • "uhdp2": User HDP 2 •...
Hardware Maintenance Manual
Page 54
...only with the arrow keys, but also with the arrow keys, and press Enter. Follow the instructions on the screen. 8. Press ENTER to enter the Boot Menu. 5. To run the test, do as a startup device is attached to select ATAPI CDx (x: 0, 1, ...) and then press Enter. 7. Some... unsupported device names may appear in menus. When the ThinkPad logo comes up, immediately press F12 to select. 46 ThinkPad T400 and R400 Hardware Maintenance Manual Use the cursor keys and ESC to -FRU index" on page 52, and check the power sources...
...only with the arrow keys, but also with the arrow keys, and press Enter. Follow the instructions on the screen. 8. Press ENTER to enter the Boot Menu. 5. To run the test, do as a startup device is attached to select ATAPI CDx (x: 0, 1, ...) and then press Enter. 7. Some... unsupported device names may appear in menus. When the ThinkPad logo comes up, immediately press F12 to select. 46 ThinkPad T400 and R400 Hardware Maintenance Manual Use the cursor keys and ESC to -FRU index" on page 52, and check the power sources...