Page 3 - Fingerprint Software Deployment Guide
Fingerprint Software Deployment Guide Updated: September, 2010
Page 4 - “Notices” on page 33.
Note: Before using this information and the product it supports, read the general information in Appendix B “Notices” on page 33. First Edition (September 2010) © Copyright Lenovo 2010. LENOVO products, data, computer software, and services have been developed exclusively at private expense and ares...
Page 5 - Contents; iii
Contents Preface . . . . . . . . . . . . . . . . . v Chapter 1. Overview . . . . . . . . . . 1 Chapter 2. Installation . . . . . . . . . 3 Installation procedures and command-lineparameters . . . . . . . . . . . . . . . . . 3 Using msiexec.exe . . . . . . . . . . . . . . 4 Standard Windows Installer...
Page 6 - iv
Page 7 - Preface
Preface Information presented in this guide is to support Lenovo ® computers installed with either the ThinkVantage ® or Lenovo Fingerprint Software program. Note: In this deployment guide, Fingerprint Software refers to both ThinkVantage Fingerprint Software and Lenovo Fingerprint Software. The goa...
Page 9 - Client Security Solution 8.3 Deployment Guide
Chapter 1. Overview The objective of biometric fingerprint technologies offered by Lenovo is to help customers addresscorporate IT regulatory compliance, reduce the costs associated with managing passwords, andenhance computing security. Fingerprint Software enables fingerprint authentication on ind...
Page 11 - Chapter 2. Installation; Installation procedures and command-line parameters; or
Chapter 2. Installation This chapter contains instructions on installing Fingerprint Software. Installation procedures and command-line parameters The Microsoft Windows Installer provides several administrative functions through command-lineparameters. The Windows Installer can perform an administra...
Page 15 - Installation examples
Standard Windows Installer public properties The Windows Installer has a set of standard built in public properties that can be set on the commandline to specify certain behavior during the installation. The following table provides most common publicproperties used in the command line. For addition...
Page 16 - Installing ThinkVantage Fingerprint Software; Use the following syntax:
Table 4. Installation examples using the setup.exe file Description Example Silent installation with no reboot setup.exe /s /v"/qn REBOOT="R"" Administrative installation setup.exe /a Silent administrative installation specifying the extractlocation setup.exe /a /s /v"/qn TARGETD...
Page 17 - Options
Options The following options are supported by the ThinkVantage Fingerprint Software. Table 6. Options supported by the ThinkVantage Fingerprint Software Parameter Description OTP • 0 = Disable the RSA SecurID support feature. • 1 = Enable the RSA SecurID support feature. The default value is 0. CTR...
Page 19 - Installing Lenovo Fingerprint Software
Table 6. Options supported by the ThinkVantage Fingerprint Software (continued) Parameter Description PWDLOGON • 1 = Enable the fingerprint-only logon for non-administrator users. • 0 = Disable the fingerprint-only logon for non-administrator users. The default value is 1. NOPOPPAPCHECK • 0 = Do not...
Page 23 - Chapter 3. Working with Fingerprint Software; XXXX; Management console tool
Chapter 3. Working with Fingerprint Software This chapter provides the information you will need to configure Fingerprint Software. Within this chapter,you may find the following topics: • “Management console tool” on page 15 • “Secure mode and convenient mode” on page 17 ThinkVantage Fingerprint So...
Page 24 - Global settings commands
Table 8. User-specific commands (continued) Command Syntax Description Edit enrolled user Example: fprconsole user editdomain0\testuser fprconsole user edittestuser EDIT [ username [| domain \ username ]] If the user name is not specified, thenthe current user name is used. Note: The enrolled user m...
Page 25 - Secure mode and convenient mode; An; Secure mode - administrator
Table 9. Global settings commands Command Syntax Description Security mode Example: To set to convenient mode:fprconsole settingssecuremode 0 SECUREMODE 0|1 This setting switches between Convenientand Secure mode of the FingerprintSoftware. Logon type LOGON 0|1 [/FUS] This setting enables(1) or disa...
Page 27 - Convenient mode - limited user
Table 12. Options for administrators in the convenient mode (continued) Settings Description Power-on Security Administrators can delete Limited user and administratorfingerprints used in power-on. Note: There must be at least one fingerprint present when power-on mode is enabled. Logon settings Adm...
Page 29 - Chapter 4. Working with ThinkVantage Fingerprint Software; Using the RSA SecurID software token
Chapter 4. Working with ThinkVantage Fingerprint Software The fingerprint console must be run from the ThinkVantage Fingerprint Software installation folder. The basicsyntax is FPRCONSOLE [USER | SETTINGS]. The USER or SETTINGS command specifies which mode ofoperation will be used. The full command ...
Page 32 - Authenticating; Yes; Configurable settings; Preboot or power-on software interface
• Click Settings . • Click Logon settings . • Enable or disable Logon Protector. If you want to use fingerprint logon, check the Replace Windows logon with fingerprint-protected logon check box. Note: Enabling and disabling Logon Protector requires a reboot. • Enable or disable fast user switching, ...
Page 33 - : By default, the fingerprint software validates stored; Unlocking the computer with fingerprint; : By default, ThinkVantage Fingerprint Software is configured
This setting is useful when SafeGuard Easy is installed on a system without BIOS passwords and isutilizing fingerprint authentication to decrypt the hard drive. • Sounds : Fingerprint Software can be configured to play a sound contained in a WAV file under various circumstance during the fingerprint...
Page 34 - ThinkVantage Fingerprint Software service
ThinkVantage Fingerprint Software service The upeksvr.exe service is added to the system after the ThinkVantage fingerprint software is installed. Itstarts running while startup, and then runs all the time the user is logging on. The upeksvr.exe service is thecore of the ThinkVantage Fingerprint Sof...
Page 35 - Chapter 5. Working with Lenovo Fingerprint Software; Active Directory support for Lenovo Fingerprint Software
Chapter 5. Working with Lenovo Fingerprint Software The fingerprint console must be run from the Lenovo Fingerprint Software installation folder. The basicsyntax is FPRCONSOLE [USER | SETTINGS]. The USER or SETTINGS command specifies what set ofoperation will be used. The full command is "fprcon...
Page 36 - Considerations for using Lenovo Fingerprint Software; To erase the fingerprint data, do the following:; Security; Lenovo Fingerprint Software service
Table 14. Policy settings (continued) Setting Description Allow users to delete fingerprints If you enable this setting, the non-administrator users areable to delete previously enrolled fingerprints using theLenovo Fingerprint Software. Allow users to import/export fingerprints If you enable this s...
Page 39 - Reader Priority; Windows logon
Appendix A. Considerations for the Lenovo FingerprintKeyboard The fingerprint device used in some ThinkPad ® notebook models is different than the fingerprint device used in the Lenovo Fingerprint Keyboard. Special considerations might be required if the fingerprint keyboard isused on some ThinkPad ...
Page 40 - Authentication with Client Security Solution; Internal only
• Using the Fingerprint Software logon interface The logon interfaces of both Lenovo Fingerprint Software and ThinkVantage Fingerprint Software must be enabled. When both fingerprint logon interfacesare enabled in the Windows 7 operating system, users can swipe their finger on either the fingerprint...
Page 42 - Trademarks
Trademarks The following terms are trademarks of Lenovo in the United States, other countries, or both: LenovoThinkCentreThinkPadThinkVantage Microsoft, Windows, and Windows Vista are the trademarks of the Microsoft group of companies. Other company, product, or service names may be trademarks or se...
